[BUGFIX] Avoid using cHash for login returnUrl