redirect if session expired
register done, merchant login half done