fixed login redirect