Building the redirection url without the request is an issue when the site is accessed
by https.
This make use of the req.build_url function in the web authentication retriever, so it
forges a consistent redirect_url for the oauth service.

Closes #3708047.