I put in the URL /news as a page all users have access to after login. I just ended up at the login page again and I can see the redirect URL, after login, will be /news
/login/?redirect_to&redirect_to=https%3A%2F%2Fsitedomain.com%2Fnews%2F%3Flogged_in_as_user%3Dtrue&aiowps_login_msg_id=session_expired
That additional querystring param of aiowps_login_msg_id session_expired belongs to ‘All in one WP security’, could that be culprit?
As an administrator I can use ‘Login as’ on a large number of users who have a variety of roles assigned (non-administrator ones). There are some users, who I can’t see any particular differences with, that if I use the ‘login as’ I don’t end up on the home page but I end up back at the login screen (you must log into the site to access it).