use a special redirect to force auth dialog to display when not authorized