login redirects to specified url