Prevent all routes from matching url_keys; fix show_position cleanup, post-login bug