make redirect post login work right, so login flow is now reasonable