Correctly redirect to auth