basic customization of AuthenticationSuccessCustomHandler.java
small fixes with redirection