make AuthenticationException handle controllers from different apps, plus a redirect param