redirect to login only if user is not found or user isnt accepted, otherwise redirect to 404