the entry page is the login page so /login becomes a redirect