On Fri, May 17, 2002 at 11:30:49AM -0400, Greg Ward wrote:
>surprisingly difficult to get right.  We originally put the "return URL"
>in the session object, but for reasons that I cannot remember it didn't
>work.  I'm pretty sure the !#^%@#^! "Back" button was involved.  We now

One annoyance:
1) User goes to /private/123/, and gets redirected to /user/ to log in.

2) User decides not to log in at this time, and hits back to do
   something else.

3) User goes to /user/ directly, logs in, and is mysteriously
   redirected to /private/123/ because the URL is still stored in their
   session.

For extra fun, put 2 hours of other browsing between steps 2 and 3.
Putting the redirect destination in the query string avoids this.

--amk