preserve hash on login redirect