2a27491f9f
* [#1749] Only consider path in SIMPLE_LOGIN redirect We don't really care about the origin, since that is implicit in `Location` headers if not given, which sidesteps the HTTP/HTTPS issue * Refuse non-relative redirects