Allow redirect through auth

* If there is no target, go to the friends page
* Always allow users to access the home page