[Security] use current request attributes to generate redirect url?