append request path to the login url

this will make it possible for login server to redirect the user
to the source page. Needs to be a GET parameter because browsers
do not necessarily send Referer header when hitting a 302