session redirect bug 1.1