fixed small auth redirects