Controller::require_acl() redirects back to original handler after login, and redirects to either /user/login or /admin depending on whether the 'admin' resource is included in the list.