redirect for login page and lobby requires authentication