feed.js - no session redirects to /auth