Hi @hammyhavoc,
There are likely two separate things going on here, and the 1.0.3 update that I just pushed should help with both.
The first is the redirect itself. ProfileSwitch Lite was sending every login to the switcher whether or not the account had any profiles linked, so an admin with none was being sent there for no reason. The new “Show Switcher on Login” setting under ProfileSwitch > General covers that. Setting it to “Only if there are multiple profiles” will send those admins straight to wp-admin.
The second is landing back on the switcher after picking a profile. Lite was quietly ignoring a failed security check on the switch form and just re-rendering the picker, which would look exactly like what you are describing. It now shows “That request expired. Please choose a profile again.” I also marked the switcher page as never-cache, since a cached copy of it would serve a stale security token.
If you still see it on 1.0.3, one detail would help a lot: when you land back on the switcher, does the URL pick up profileswitch_action=login? If it does, WordPress is sending you back through the login form, which would point at the login cookie rather than the switcher itself. If the URL stays the same and you see the expired message, it is the security token.
Thank you for reporting this!
