auth bug fix, return after setting redirect for successful auth