#3 might not be correct and you might have to encode it as a query param of the redirect_to param but I doubt it @Rahul VR see above