handle return urls via session, closes #107
version bumped 0.9.10