initial code to allow redirect to be restricted to a single member group