Pass current path as ?next= when bouncing unauthenticated requests
to /echo/login; after successful auth, JS reads and validates the
param (must start with /echo/, not /echo/login) before redirecting.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>