make the auth redirects work appropriately