fixed auth redirect call