avoid sign-in redirects on unauthorized and missing identifier responses