added redirect to login if not authed