Nitpick: do session lookup after checking whether user is already logged in
Add endpoint for safari/ios thirdparty domain -workaround