#65: redirect to login page when user if not authenticated