Resolve false not-permitted redirect and broken session expiry handling

Fix rapid reload causing false not-permitted redirects; add return statement to abort navigation on in-flight request cancellation.