fix redirect after login by using route param instead of url / fix permission to enable redirect through zf user controller, when logged in successfully

bc break was introduced in zfc user 1.1.0 - security fix