redirect if not authorized
redirect to login on not authorized
updated redirect
users/login
removed redirect
redirect to login