do not redirect when using client certificate authentication