all paths now redirects to /login if user not authentificated