Instead of returning a 400 error when return_to is passed without control_plane_url configured, silently ignore it and proceed with the normal same-origin SSO flow.