Could we enhance `mustAuth` to also allow a configurable redirect?