in olden times: when a user would go to the scan url, but they weren't logged in, they'd have to log in and then wouldn't get redirected back to the scan page. confusing.
in modern times: user gets redirected to scan page after login