fixed bogus redirect url while login