ensures token is present, otherwise forwards to login page