fixed further bugs in user controller authenticate redirect