try removing follow=True to see exactly where the initial redirect leads and why the login page is displayed.
follow=True