fixed redirection after forced password change