controller/template for auth redirect