dont prompt but be clever about redirects by hiding the url in a cookie