fix auth filter redirect