redirect correctly after oauth