fixed login/logout redirects