Force local-only post-login redirects