Avoid redirect loops for /auth/ endpoint, and bump version