for normal requests to /login, save the referrer and redir back there

properly closes #164