updating route to /login so that it forces https