Aaron

Thank you for your reply. That fixed the issue.

I had to type out that if statement in English to fully understand what was going wrong:If the user does not have a session AND they're trying to get to someplace other than /login or /, redirect them to /login. Since my regex was matching anything starting with /, there was no other place where they could go, making the 2nd half fail like you said.