work with proxies behind AWS load balancer
support redirect after login