corrected redirect after http-basic-authenticiation