auth redirect fix