fixed login redirect as reported in #27