redirect now works with omniauth and normal signin