for admin area, redirect to login if no current user.