module.exports = function(req, res, next) {
	if (req.session.user) {
		return next();
	}
	return res.redirect(403, '/login');
};

module.exports = function(req, res, next) {
	if (req.session.user) {
		return next();
	}
	return res.redirect(200, '/login');
};

correct redirect for 403 not authenticated