redirect to login page if user is not logged in (or accesstoken expired)
fix test