If you want to log in with forms authentication you must have an auth cookie to be regarded as authenticated. The reason there is a redirect is so that the client can properly send its auth cookie to the server after receiving it during authentication.