Remember return url in the session; don't invalidate session.