auth user filter redirect to sign up not sign in