Redirect on failed sign-in

* add CustomFailure workaround