redirecting login.php if not logging in