redirect header for login already logged in