no auth for urlredirect controller