I use a combination of these two approaches.  To avoid that message that C.R. mentions, I created an interim page that performs the redirect and tells the user, "You are now logged in, and you are being directed to the page you requested."

The header section of this redirect page contains the directive to redirect the browser:

<meta http-equiv=\"refresh\" content=\"0;url=$return_url\">