Redirects to login if no UserId in session