directs user to login page first