redirect for auth totally works