Ray,
I think there is actually an issue with the access rule manager. I just decided to strip out the restrict rules access on the redirect page and everything redirects correctly now... so I need see why the session variable is not setting correctly or pulling from the database.