login redirect loop fixed