changed the redirect to / from /login to keep things consistent