make sure to set owner and group
use FORCE_SCRIPT_NAME so it redirects to login properly