Because the internal URL is something internal to the Geo sites,
and the external URL is what users would access in the first place,
this updates the secondary login OAuth flow to always redirect users
to the external URL even if an internal URL is set for the primary.