first redirect, then authenticate
regex was still wrong
removed redirect from secureByLogin
merge
Merge remote-tracking branch 'upstream/master'
Merge pull request #78 from leider/master

fixed more registration bugs