tweak auth redirect to 302