revised auth

Revised Auth, optional redirection if user is not verified