login redirect still incorrect