implemented in form-login element attribute default-target-url="/index" that solved the problem so the user with the password koala can redirect to the index page from now on.