bugfix: no more circular redirects to /firstboot