make post-login redirect also configurable