Store the original URL the multi-step auth is done from in the session and redirect to it after success.
Hide the account connected notification for multi-step auth attempts because it's misleading.