NEW: Allow getCantLoginBackURL to be extended