cleaned up redirects for session logins