changed redirect for login to the profile page, since that kind of a user would thikn the JSON was an error. User/me still exists, but not for plain old 'users';