fix some sso redirects