redirect /auth to /auth/