fix: Tighten register → auto-login → redirect flow
register
redirectTo
Explicit redirect sanitization Clear failure messages Clear control flow Safe assumptions No silent fallthroughs Easier to debug Same UX