ensureLoggedIn changed to ignore requests to the redirectTo/login route

In order for this middleware to be able to be applied globally (with app.use()) as opposed to route-to-route, it must not check for authentication when a request to the login page is made.