after login, users are redirected to show_users