Change return string to "backToLogin" when session expired