render login when accessing a Step without being logged in