avoid empty loginReturnURL for webtop logins