User should go to login if not auth