Security Fix: When not logged in, if path not '/login', will be redircted to login.