What is best practice to handle what happens to the user after the successfully login on a dedicated login page.
Our current website has 2 possibilities. If the user was directed to the login page based on trying to access content they don't have access to once successfully logged in it will redirect back to that page. If they manually navigate to the login page after a successful login they get directed to the home page. This doesn't quite feel right to me.
The scenario that sparked this question is my project manager is insisting on displaying a thank you message instead of a redirection. Thoughts?