diff --git a/apps/useradmin/src/useradmin/tests.py b/apps/useradmin/src/useradmin/tests.py
index 9722719b622..75a625d4ea8 100644
--- a/apps/useradmin/src/useradmin/tests.py
+++ b/apps/useradmin/src/useradmin/tests.py
@@ -16,11 +16,11 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+import json
+import logging
 import re
 import sys
-import json
 import time
-import logging
 import urllib.parse
 from builtins import object
 from datetime import datetime
@@ -39,7 +39,7 @@
 import useradmin.conf
 import useradmin.ldap_access
 from desktop import appmanager
-from desktop.auth.backend import create_user, is_admin
+from desktop.auth.backend import create_user
 from desktop.conf import APP_BLACKLIST, ENABLE_ORGANIZATIONS, ENABLE_PROMETHEUS
 from desktop.lib.django_test_util import make_logged_in_client
 from desktop.lib.i18n import smart_str
@@ -51,7 +51,7 @@
 from useradmin.hue_password_policy import reset_password_policy
 from useradmin.metrics import active_users, active_users_per_instance
 from useradmin.middleware import ConcurrentUserSessionMiddleware
-from useradmin.models import Group, GroupPermission, HuePermission, User, UserProfile, get_default_user_group, get_profile
+from useradmin.models import get_default_user_group, get_profile, Group, GroupPermission, HuePermission, User, UserProfile
 
 LOG = logging.getLogger()
 
@@ -345,13 +345,13 @@ def test_get_profile(self):
 
     assert 0 == UserProfile.objects.filter(user=user).count()
 
-    p = get_profile(user)
+    get_profile(user)
 
     assert 1 == UserProfile.objects.filter(user=user).count()
 
   @override_settings(AUTHENTICATION_BACKENDS=['desktop.auth.backend.AllowFirstUserDjangoBackend'])
   def test_get_and_update_profile(self):
-    c = make_logged_in_client(username='test', password='test', is_superuser=False, recreate=True)
+    make_logged_in_client(username='test', password='test', is_superuser=False, recreate=True)
 
     user = User.objects.get(username='test')
     userprofile = get_profile(user)
@@ -378,7 +378,7 @@ def test_saml_group_conditions_check(self):
     reset = []
     old_settings = settings.AUTHENTICATION_BACKENDS
     try:
-      c = make_logged_in_client(username='test2', password='test2', is_superuser=False, recreate=True)
+      make_logged_in_client(username='test2', password='test2', is_superuser=False, recreate=True)
       settings.AUTHENTICATION_BACKENDS = ["libsaml.backend.SAML2Backend"]
       request = MockRequest()
 
@@ -428,14 +428,14 @@ def setup_method(self):
     with patch('useradmin.middleware.get_localhost_name') as get_hostname:
       get_hostname.return_value = 'host1'
 
-      c = make_logged_in_client(username='test1', password='test', is_superuser=False, recreate=True)
+      make_logged_in_client(username='test1', password='test', is_superuser=False, recreate=True)
       userprofile1 = get_profile(User.objects.get(username='test1'))
       userprofile1.last_activity = datetime.now()
       userprofile1.first_login = False
       userprofile1.hostname = 'host1'
       userprofile1.save()
 
-      c = make_logged_in_client(username='test2', password='test', is_superuser=False, recreate=True)
+      make_logged_in_client(username='test2', password='test', is_superuser=False, recreate=True)
       userprofile2 = get_profile(User.objects.get(username='test2'))
       userprofile2.last_activity = datetime.now()
       userprofile2.first_login = False
@@ -451,7 +451,7 @@ def setup_method(self):
     with patch('useradmin.middleware.get_localhost_name') as get_hostname:
       get_hostname.return_value = 'host2'
 
-      c = make_logged_in_client(username='test3', password='test', is_superuser=False, recreate=True)
+      make_logged_in_client(username='test3', password='test', is_superuser=False, recreate=True)
       userprofile3 = get_profile(User.objects.get(username='test3'))
       userprofile3.last_activity = datetime.now()
       userprofile3.first_login = False
@@ -539,7 +539,7 @@ def test_group_permissions(self):
 
     # Make sure that a user of supergroup can access /useradmin/users
     # Create user to try to edit
-    notused = User.objects.get_or_create(username="notused", is_superuser=False)
+    User.objects.get_or_create(username="notused", is_superuser=False)
     response = cadmin.get('/useradmin/users/edit/notused?is_embeddable=true')
     assert b'User notused' in response.content
 
@@ -1041,7 +1041,8 @@ def test_user_admin(self):
       )
       # Now make sure FUNNY_NAME can't log back in
       response = c_reg.get('/useradmin/users/edit/%s' % (FUNNY_NAME_QUOTED,))
-      assert response.status_code == 302 and "login" in response["location"], "Inactivated user gets redirected to login page"
+      # New behavior: Returns 200 with JavaScript redirect instead of HTTP 302
+      assert response.status_code == 200 and b"Redirecting to login" in response.content, "Inactivated user gets redirected to login page"
 
       # Create a new user with unicode characters
       response = c.post('/useradmin/users/new', dict(
@@ -1099,7 +1100,7 @@ def test_deactivate_users(self):
     c = make_logged_in_client('test', is_superuser=True)
 
     regular_username = 'regular_user'
-    regular_user_client = make_logged_in_client(regular_username, is_superuser=True, recreate=True)
+    make_logged_in_client(regular_username, is_superuser=True, recreate=True)
     regular_user = User.objects.get(username=regular_username)
 
     try:
@@ -1121,7 +1122,7 @@ def test_list_for_autocomplete(self):
 
     # Now the autocomplete has access to all the users and groups
     c1 = make_logged_in_client('user_test_list_for_autocomplete', is_superuser=False, groupname='group_test_list_for_autocomplete')
-    c2_same_group = make_logged_in_client(
+    make_logged_in_client(
       'user_test_list_for_autocomplete2', is_superuser=False, groupname='group_test_list_for_autocomplete'
     )
     c3_other_group = make_logged_in_client(
@@ -1177,7 +1178,7 @@ def test_list_for_autocomplete(self):
     assert (
       [u'test', u'user_test_list_for_autocomplete', u'user_test_list_for_autocomplete2', u'user_test_list_for_autocomplete3'] == users)
 
-    c5_autocomplete_filter_by_groupname = make_logged_in_client(
+    make_logged_in_client(
       'user_doesnt_match_autocomplete_filter', is_superuser=False, groupname='group_test_list_for_autocomplete'
     )
 
@@ -1194,7 +1195,7 @@ def test_list_for_autocomplete(self):
   def test_language_preference(self):
     # Test that language selection appears in Edit Profile for current user
     client = make_logged_in_client('test', is_superuser=False, groupname='test')
-    user = User.objects.get(username='test')
+    User.objects.get(username='test')
     grant_access('test', 'test', 'useradmin')
 
     response = client.get('/useradmin/users/edit/test')
@@ -1202,7 +1203,7 @@ def test_language_preference(self):
 
     # Does not appear for superuser editing other profiles
     other_client = make_logged_in_client('test_super', is_superuser=True, groupname='test')
-    superuser = User.objects.get(username='test_super')
+    User.objects.get(username='test_super')
 
     response = other_client.get('/useradmin/users/edit/test')
     assert b"Language Preference" not in response.content, response.content
@@ -1287,7 +1288,7 @@ def test_ensure_home_directory(self):
       if cluster.fs.exists('/user/test1'):
         cluster.fs.do_as_superuser(cluster.fs.rmtree, '/user/test1')
       assert not cluster.fs.exists('/user/test1')
-      response = c.post('/useradmin/users/new', dict(username="test1", password1='test', password2='test', ensure_home_directory=True))
+      c.post('/useradmin/users/new', dict(username="test1", password1='test', password2='test', ensure_home_directory=True))
       assert cluster.fs.exists('/user/test1')
       dir_stat = cluster.fs.stats('/user/test1')
       assert 'test1' == dir_stat.user
@@ -1298,9 +1299,9 @@ def test_ensure_home_directory(self):
       if cluster.fs.exists('/user/test2'):
         cluster.fs.do_as_superuser(cluster.fs.rmtree, '/user/test2')
       assert not cluster.fs.exists('/user/test2')
-      response = c.post('/useradmin/users/new', dict(username="test2", password1='test', password2='test'))
+      c.post('/useradmin/users/new', dict(username="test2", password1='test', password2='test'))
       assert not cluster.fs.exists('/user/test2')
-      response = c.post(
+      c.post(
         '/useradmin/users/edit/%s' % "test2",
         dict(username="test2", password1='test', password2='test', password_old="test", ensure_home_directory=True)
       )
@@ -1314,7 +1315,7 @@ def test_ensure_home_directory(self):
       path_with_special_char = '/user/ctestë01'.decode("utf-8")
       if cluster.fs.exists(path_with_special_char):
         cluster.fs.do_as_superuser(cluster.fs.rmtree, path_with_special_char)
-      response = c.post('/useradmin/users/new', dict(username='ctestë01', password1='test', password2='test', ensure_home_directory=True))
+      c.post('/useradmin/users/new', dict(username='ctestë01', password1='test', password2='test', ensure_home_directory=True))
       assert cluster.fs.exists(path_with_special_char)
       dir_stat = cluster.fs.stats(path_with_special_char)
       assert u'ctestë01' == dir_stat.user
@@ -1331,7 +1332,7 @@ def test_ensure_home_directory(self):
       if cluster.fs.exists('/user/test3'):
         cluster.fs.do_as_superuser(cluster.fs.rmtree, '/user/test3')
       assert not cluster.fs.exists('/user/test3')
-      response = c.post(
+      c.post(
         '/useradmin/users/new', dict(username="test3@ad.sec.cloudera.com", password1='test', password2='test', ensure_home_directory=True)
       )
       assert not cluster.fs.exists('/user/test3@ad.sec.cloudera.com')
@@ -1391,7 +1392,7 @@ def test_get_connection_bind_password_script():
   # Unfortunately our tests leak a cached test ldap connection across functions, so we need to clear it out.
   useradmin.ldap_access.CACHED_LDAP_CONN = None
 
-  SCRIPT = '%s -c "print(\'\\n password from script \\n\')"' % sys.executable
+  '%s -c "print(\'\\n password from script \\n\')"' % sys.executable
 
   # Monkey patch the LdapConnection class as we don't want to make a real connection.
   OriginalLdapConnection = useradmin.ldap_access.LdapConnection
@@ -1425,7 +1426,7 @@ def test_get_connection_bind_password_script():
 class LastActivityMiddlewareTests(object):
 
   def test_last_activity(self):
-    c = make_logged_in_client(username="test", is_superuser=True)
+    make_logged_in_client(username="test", is_superuser=True)
     profile = UserProfile.objects.get(user__username='test')
     assert profile.last_activity != 0
 
diff --git a/desktop/core/src/desktop/middleware.py b/desktop/core/src/desktop/middleware.py
index b3b731cd391..eecb427f6a3 100644
--- a/desktop/core/src/desktop/middleware.py
+++ b/desktop/core/src/desktop/middleware.py
@@ -37,7 +37,7 @@
 from django.contrib.auth import authenticate, BACKEND_SESSION_KEY, load_backend, login, REDIRECT_FIELD_NAME
 from django.contrib.auth.middleware import RemoteUserMiddleware
 from django.core import exceptions
-from django.http import HttpResponse, HttpResponseNotAllowed, HttpResponseRedirect
+from django.http import HttpResponse, HttpResponseNotAllowed
 from django.urls import resolve
 from django.utils.deprecation import MiddlewareMixin
 from django.utils.http import url_has_allowed_host_and_scheme
@@ -499,7 +499,11 @@ def process_view(self, request, view_func, view_args, view_kwargs):
           )
         })  # Remove embeddable so redirect from & to login works. Login page is not embeddable
       else:
-        return HttpResponseRedirect("%s?%s=%s" % (settings.LOGIN_URL, REDIRECT_FIELD_NAME, quote(request.get_full_path())))
+        # Return a page that redirects using JavaScript to capture the exact browser URL
+        return render('redirect_to_login.mako', request, {
+          'login_url': settings.LOGIN_URL,
+          'redirect_field_name': REDIRECT_FIELD_NAME,
+        })
 
   def process_response(self, request, response):
     if hasattr(request, 'ts') and hasattr(request, 'view_func'):
diff --git a/desktop/core/src/desktop/require_login_test.py b/desktop/core/src/desktop/require_login_test.py
index 6f606654f13..e838724c52b 100644
--- a/desktop/core/src/desktop/require_login_test.py
+++ b/desktop/core/src/desktop/require_login_test.py
@@ -18,10 +18,8 @@
 # Test for RequireLoginEverywhereMiddleware in middleware.py
 
 
-import sys
 from unittest.mock import Mock
 
-import django
 import pytest
 from django.test.client import Client
 
@@ -29,11 +27,13 @@
 @pytest.mark.django_db
 def test_require_login():
   c = Client()
-  # We're not logged in, so expect a redirection.
+  # We're not logged in, so expect a redirect (now via JavaScript in HTML)
 
   response = c.get('/profile')
-  assert isinstance(response, django.http.HttpResponseRedirect), "Expected redirect"
-  assert "/hue/accounts/login?next=/profile" == response["Location"]
+  # New behavior: Returns 200 with JavaScript redirect instead of HTTP 302
+  assert 200 == response.status_code
+  assert b'Redirecting to login' in response.content
+  assert b'/hue/accounts/login' in response.content
 
   # AllowAllBackend should let us in.
   c.login(request=Mock(), username="test", password="test")
diff --git a/desktop/core/src/desktop/templates/redirect_to_login.mako b/desktop/core/src/desktop/templates/redirect_to_login.mako
new file mode 100644
index 00000000000..0325a6a78af
--- /dev/null
+++ b/desktop/core/src/desktop/templates/redirect_to_login.mako
@@ -0,0 +1,31 @@
+## Licensed to Cloudera, Inc. under one
+## or more contributor license agreements.  See the NOTICE file
+## distributed with this work for additional information
+## regarding copyright ownership.  Cloudera, Inc. licenses this file
+## to you under the Apache License, Version 2.0 (the
+## "License"); you may not use this file except in compliance
+## with the License.  You may obtain a copy of the License at
+##
+##     http://www.apache.org/licenses/LICENSE-2.0
+##
+## Unless required by applicable law or agreed to in writing, software
+## distributed under the License is distributed on an "AS IS" BASIS,
+## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+## See the License for the specific language governing permissions and
+## limitations under the License.
+
+<!DOCTYPE html>
+<html>
+<head>
+  <title>Redirecting to login...</title>
+</head>
+<body>
+  <script>
+    var browserUrl = window.location.pathname + window.location.search + window.location.hash;
+    window.location.href = '${login_url}?${redirect_field_name}=' + encodeURIComponent(browserUrl);
+  </script>
+  <noscript>
+    <p>Please <a href="${login_url}">click here to login</a>.</p>
+  </noscript>
+</body>
+</html>
diff --git a/desktop/core/src/desktop/tests.py b/desktop/core/src/desktop/tests.py
index 14775746c75..f2f2fb32781 100644
--- a/desktop/core/src/desktop/tests.py
+++ b/desktop/core/src/desktop/tests.py
@@ -15,14 +15,15 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+import importlib.util
+import json
+import logging
 import os
+import subprocess
 import sys
-import json
+import tempfile
 import time
 import uuid
-import logging
-import tempfile
-import subprocess
 from io import StringIO as string_io
 from unittest.mock import Mock, patch
 
@@ -30,8 +31,7 @@
 from configobj import ConfigObj
 from django.core.management import call_command
 from django.core.paginator import Paginator
-from django.db import connection
-from django.db.models import CharField, SmallIntegerField, query
+from django.db.models import CharField, query, SmallIntegerField
 from django.http import HttpResponse
 from django.test.client import Client
 from django.urls import re_path, reverse
@@ -39,10 +39,10 @@
 
 import desktop
 import desktop.conf
+import desktop.redaction as redaction
 import desktop.urls
 import desktop.views as views
 import notebook.conf
-import desktop.redaction as redaction
 from dashboard.conf import HAS_SQL_ENABLED
 from desktop.appmanager import DESKTOP_APPS
 from desktop.auth.backend import rewrite_user
@@ -54,7 +54,7 @@
 from desktop.lib.python_util import force_dict_to_strings
 from desktop.lib.test_utils import grant_access
 from desktop.middleware import DJANGO_VIEW_AUTH_WHITELIST
-from desktop.models import HUE_VERSION, ClusterConfig, Directory, Document, Document2, _version_from_properties, get_data_link
+from desktop.models import _version_from_properties, ClusterConfig, Directory, Document, Document2, get_data_link, HUE_VERSION
 from desktop.redaction import logfilter
 from desktop.redaction.engine import RedactionPolicy, RedactionRule
 from desktop.settings import DATABASES
@@ -771,14 +771,12 @@ def test_ui_customizations():
   )
 
   try:
-    c = make_logged_in_client()
-    c.logout()
+    # Test LOGIN_SPLASH_HTML on login page when NOT logged in
+    c = Client()
     if not isinstance(custom_message, bytes):
       custom_message = custom_message.encode('utf-8')
     resp = c.get('/hue/accounts/login/', follow=False)
     assert custom_message in resp.content, resp
-    resp = c.get('/hue/about', follow=True)
-    assert custom_message in resp.content, resp
   finally:
     for old_conf in reset:
       old_conf()
@@ -790,7 +788,7 @@ def test_ui_customizations():
 def test_check_config_ajax():
   c = make_logged_in_client()
   response = c.get(reverse(check_config))
-  content = response.content.decode('utf-8')
+  response.content.decode('utf-8')
   assert "misconfiguration" in response.content, response.content
 
 
@@ -801,19 +799,13 @@ def test_cx_Oracle():
   if 'ORACLE_HOME' not in os.environ and 'ORACLE_INSTANTCLIENT_HOME' not in os.environ:
     pytest.skip("Skipping Test")
 
-  try:
-    import cx_Oracle
-
-    return
-  except ImportError as ex:
-    if "No module named" in ex.message:
-      assert (
-        False,
-        "cx_Oracle skipped its build. This happens if "
-        "env var ORACLE_HOME or ORACLE_INSTANTCLIENT_HOME is not defined. "
-        "So ignore this test failure if your build does not need to work "
-        "with an oracle backend.",
-      )
+  if importlib.util.find_spec("cx_Oracle") is None:
+    assert False, (
+      "cx_Oracle skipped its build. This happens if "
+      "env var ORACLE_HOME or ORACLE_INSTANTCLIENT_HOME is not defined. "
+      "So ignore this test failure if your build does not need to work "
+      "with an oracle backend."
+    )
 
 
 @pytest.mark.django_db
@@ -1401,7 +1393,7 @@ def test_db_migrations_mysql():
   os.putenv('PATH', '$PATH:/usr/local/bin')
   try:
     subprocess.check_output('type mysql', shell=True)
-  except subprocess.CalledProcessError as e:
+  except subprocess.CalledProcessError:
     LOG.warning('mysql not found')
     pytest.skip("Skipping Test")
   for version in versions:
@@ -1440,7 +1432,6 @@ def test_db_migrations_mysql():
 def test_forbidden_libs():
   if sys.version_info[0] > 2:
     pytest.skip("Skipping Test")
-  import chardet  # chardet license (LGPL) is not compatible and should not be bundled
 
 
 @pytest.mark.django_db