fix session expiration redirection