minor login redirect bugs

[biblicabeebli]

• check whether there is a test for redirecting to a page that the researcher doesn't have access to - it should fail, but failing with the 400 page is ok. ( also see When a Researcher user navigates to a participant page on a study they don't have access to they do not see a 400 error #357 )

• should we handle the case of a failed login attempt not retaining the ?page=section bit of the url - let's make sure we have a test testing that case, even if it confirms that we don't support that case. (this is slightly higher than zero importance because two factor auth always has a chance to be wrong due to time syncing bugs)

• user hits enter or refresh while on the login page, after validly logging in on another tab - if that login page had a ?page= section - should redirect to the url target?

  • no