Login security improvements

- Prevent use of GET vars in login controller/processor
- Restrict returnUrl in login processor to url of login context