fix authentication / redirect