Improve RelayState handling

[c-tanner]

In some cases, RelayState may not be defined in the IdP.

If not provided, the value becomes undefined, putting the user in an undesired state (my-app.com/undefined).

This adds better handling of RelayState and provides a fallback to the configured loginRoute.

To reproduce: use MockSAML's Test IdP Login, which does not provide RelayState.