Function complete_redirect 

fn complete_redirect(
    services: &Services,
    flow: Flow<'_>,
    login_token: &str,
) -> Result<Redirect>

Redirects with 303 so the browser cannot replay the password form into the completion or callback route.