Fix login success and failure redirects, allow/deny methods, paths