redirect away instead of erroring out when user isn't logged in, fixes #9