add auth redirect