change up Instagram flow to return to /photos/return so allow making the return url not require auth