Do not intercept redirects
Login should only be possible from one url