fix redirect again
fix token