correct redirect in create or login