some fixes but redirect to validateLogin doesn't work