prompt for login if not authenticated