Redirect to login if user session ended rather than show 403 forbidden