[#77] attempt to use login_url instead of raw string