Update returnTo middleware

by default express doesn't do case sensitive routing, so `/login` & '/LogIn' are treated same.