redirect to private if logged