SSO Bridge: use /sso/login