fix redirector and auth