Add .env and tmpUpload to gitignore
Add redirect on root when user is not logged in