Normalize redirect targets and fallback auth state after login, and switch manager server defaults to the production HTTPS domain to avoid localhost-origin redirect issues. Made-with: Cursor