redirect not re-render upon failed auth