fix broken returnto with oauth login