setUltDest' which used in redirectLogin(which is called from requireAuth) set session reqGetParams, but not postParams.
This means that , if there are a code as below, posted parameters are lost, aren't these?

postFooR :: Handler RepHtml
postFooR = do
   (uid,_) <- requireAuth
   (x, y) <- uncurry (liftM2 (,)) (lookupPostParam "x", lookupPostParam "y")
   ....
   defaultLayout $ do
      ....
      ....