Change the redirect behaviour so that the the asp.net applcation doesn't attempt to do naughty cors things.

e-suite.API/eSuite.API/Controllers/AccountController.cs

@@ -71,7 +71,7 @@ public class AccountController : ESuiteController
         {
             await _cookieManager.DeleteSsoIdCookie(Response);
             var url = await _singleSignOn.StartSingleSignOn(ssoId.Value, cancellationToken);
-            return Redirect(url);
+            return Ok(new { redirectTo = url });
         }
 
         login ??= new Login();