new auth with redirect