take an optional qs page/qs assignment instead of guessing on pages that link to login forms instead of require them via acl