fix "previous redirect" detection
append request path to the login url

this will make it possible for login server to redirect the user
to the source page. Needs to be a URL parameter because browsers
do not necessarily send Referer header when hitting a 302
bump version