avoid accessing login page if user has logged in