SSO login portal. Apps redirect here with ?return_to=