updates - broken redirect after session expiry