force login if user isn't logged in.