fix redirect loop by set root to other than sign_in