Redirect to login upon denied per #1155