fix redirect to / instead of /auth