Hide web app behind login

Currently the whole web app can be accessed by anyone. Instead, the user should be redirected to the login page.