fix redirect to user.php