redirect to /login for any unauthenticated response

fixes #412  (and if you try to look at a draft version of content)