Don't store XHR requests for user redirection after log-in.

In the case that users clicked 'Log in', but the last request the server received was an XHR, they would be redirected to that XHR endpoint. This was unhelpful.

This code is called on nearly every request so I'm fielding it to see if anyone is relying on this behaviour. Will merge in a couple hours otherwise.
This `'/mypath'` string could perhaps be put into a `let` considering it appears 3 times