Fixed auth when redirecting to user settings