redirect to login page if user view management directly