Good catch. This needs to be removed. I'll have to see if it's possible to cleanly implement this optional sign-on-redirect behavior (and also figure out why we ever used it in the first place, it might be obsolete).