Fixed bug with Friendly forwarding

When a AuthComponent::$loginRedirect is set, the 'Auth.redirect' session variable does not get set to the REFERER even though $loginRedirect is supposed to be a fallback if _no_ REFERER was set