login redirects to homepage if authenticated