Replace hardcoded http URLs
/login redirects to caller page