improved post-login/signup redirects
new feature: email verifications can be resent