properly redirect to http or https. Failure to do so will prevent login popup to autoclose