it is better to redirect to the login page since the session is not found