Make login redirects work, require password