no redirect even the session is not nil(new user can login)