Fixes #68
Preserve query-string on ::unauthorized-uri and store an absolute url.
Also test for absolute url and query-string present in redirect-location
after login.