res.redirect and auth redirect support