redirect to /hack after login