Kovid - it looks like they made further changes where
https://account.thetimes.co.uk/login no longer works as it now has a state variable that comes from the redirect at login.thetimes.co.uk. This looks similar to the WSJ SSO format but not quite. Do you recognize this style from other recipes per chance?