redirect to login if no longer authenticated on settings page