Do not redirect when user is using password-reset link as it stuffs things up