Use available query string when redirecting

If the return_to url has a query string attached to it, we want to be
sure we are including it when clearance redirects.

URI::HTTP has the wonderful `request_uri` method that returns us the
path and query string together, but our session variable stores only
`fullpath` which URI parses as URI::Generic. That means we have to
assemble the path and query string ourselves.