fix login redirect. Closes #36