add redirect on auth