redirect when not logged in and root