In documentation it fails to mention what will the returnUrl defaults to if loginRequired isn't called. Currently it redirects to the default controller, but it doesn't take in consideration the current module. Will this be a feature added in next revisions? Or do I need to overload CWebUser::getReturnUrl?