v1.3.2

Fixed

• Redirects no longer drop query params (notably the tk token). performRedirect() built the target by concatenating redirectUrl with window.location.search. When redirectUrl already carried a query string — e.g. a router link with edu/pill_id/locale — the concatenation produced a second ?, so the appended tk token was folded into the preceding value and lost. The post-click redirect then landed unauthenticated and in the wrong locale. The destination is now assembled with URL + URLSearchParams, preserving params already on redirectUrl and merging the current ones in with &.