forced no cache on browser, changed login redirect logic