ensureLoggedIn changed to ignore requests to the redirectTo route, i.e., /login