users are not redirected to home page if authentication fails