Using { replace: true } replaces the login page entry in the history stack, so pressing back does not usually return the user to the login page.