removed / from redirect if invalid login