fix auth required redirects