added force login middleware