set password without login redirect bug fix