main controller redirect to login