Redirect after login loses query params

Do we want URL params? That seems highly unorthodox.