add header redirect back in place. Force everybody to go to a shib login if they aren't logged in.