Send that code autofilled into the destination url form so it's a second POST click to login and sounds good.