redirect authentication to accessor host