change no auth to redirect to login