Prevent access to /auth/ when logged in

Also redirect to login page when password is updated