when redirecting the user to the login page after he requested a page that requires authentication, it is best practice to keep the url that was requested so that after logi