Test `return_to` optional param in SSO-style logout