should redirect all requests to login page, then forward to original requested url after login succeeeds