figured out authentication redirect! yay.