use absolute url in login form to restore forced ssl