(fixes #3156, BP from #3073) fixed to make login url using ssl_base_url setting for not to redirect twice