anonymous users are redirected to root_path when not logged in