make sure login does not redirect