login: obtain 'next' in a common call.
Set session expiration in settings.
Re-display login on 'Cancel' without hackery.
login: Drop duplicate 'Cancel' code.
login: Commonize the after-auth login code.
login: Use OkupyError in wider scope.