What happens if the user just navigates to `/login` or `/` ?