fixed login redirects