save whole form state, not just QUERY_STRING, for postsignin