It looks like your id_users variable is still set to the same value. Is this the session variable you use to determine if a user is logged in or not? If so then it seems that you would be logged in when you get to the success page and again when you visit the new page. How is your login rule setup? If it is based on this session variable being present and the value is correct then it seems that you should still be passing the logged in rule.