Redirect to /app if session cookie exists