direct call used instead of redirect for sso now