How to implement a guard that checks user authorization and redirects to login page if not authorized?