fixed login redirect url