add redirect to login_path if user is not signed in