just do a redirect in isAuthorized