some fixes
always redirect to login page when not logged in