Fixes #1

When more authentication is required for internal pages, handle
redirects properly.