added optional redirect route after authentication