login routes handle redirect

[mattlub]

relates #114

All this is based on freecodecamp, try going to freecodecamp on incognito mode and click sign in with github to see it

for when you are redirected to login to the OTP during the OAuth flow with a return_to query param.

• amends the GET /login handler
• amends the POST /login handler

[m4v15]

Fixed some error with the redirect not being properly URI encoded