page and query string are set in the session for the login page.

fixes the problem where the query string has special characters that cause escaping issues.