added httpresponseredirect to prevent back button log back in