We only use the `launch_presentation_return_url` provided to the @provider, in order to prevent using an open redirect.