authenticate with BrucesAdminArea and redirect back
fixed verify back url
some variable handling done