update to always go through login so that a session starts there