don't do on login redirect as at the moment a shibboleth session triggers a login event on each request