login should push users to a next url if available