intercepting redirect turned off
bugfix: password reset page now shows short username