cd45fdd7

By: Michael Lynch <git@mtlynch.io>

Simplify login next-path tests

Merge the next-path validation cases into TestLoginPost so the login
handler keeps the broader redirect coverage without a separate auth
integration test. This also verifies invalid redirect targets fail
before authentication runs.