add success.html to bypass login sequence