Fixed: login without enough permissions now results in a warning AND redirection, not just the redirection