Remember the return url in the session; don't invalidate session.