Functional strict
JS Lint
Logic fixes
Only enable if passwords match
Set app's redirectURL if it is present, the fallback to cookie