redirects to original url after login
went back to separate assoc object instead of assoc structured property, because ndb does not let you filter on multiple elements in a structured property. Blah.