send the user a login page if the user isn't authenticated.