added visitors routes to login redirect whitelist