fix: autoredirect for login operation [...]
replace base64_encode() and base64_decode() with custom base64UrlEncode() and base64UrlDecode() which work around the rare occasion of special url symbols `/` or `+` appearing in encoded string
changelog