module.exports = function(req, res, next) {
	if (req.session.user) {
		return next();
	}
	return res.redirect(403, '/login');
};

@@ -107,11 +107,11 @@
 ect(
-403
+200
 , '/

correct redirect for 403 not authenticated