Change servlet form based auth to store the redirect location in the session