rest: Do not crash with empty remote_auth field
rest: render return_to login form