cheap ass auth redirect