We used request.url and a back_url for the home path to redirect users
if they did not end up trying to access on a deep link.
In case you access / and get redirected by require_login, you want users
to end up on the after_login_default_redirect_url
Likewise, if you access /login without a back_url, you want the same
behavior
Deep linking logins are unchanged
https://community.openproject.org/work_packages/74756
Restores previous behavior (inferred from broken jQuery code), hiding
"Session expiry time after inactivity" field unless "Session expires"
is checked.
Possibly broken in #18734.