Fixed headers. Redirect on failed login