redirect to login page if token not set
redirect to popup