Redirect to an url, not a string
Use LoginManager unauthorized() method - better failure handling.
Merge pull request #4 from alexef/fix2

Redirect to an url, not a string