fixed login redirect to keep body data