8e13ce5b78
I had reintroduced this indacb53b8after David removed it in6bbf68a4, but now I agree we don't need it. Also, fix a CORS error when trying to redirect a user to an untenanted path after login (see https://fizzy.37signals.com/5986089/collections/2/cards/1032).