added redirect to root in case of auth failure