fixed redirect loop on logout when user session had expired