PLINK-412 should be resolved as it depends on the next valve being called.
PLINK-413 might be fixed. The root cause of 413 is that the hosted page is server via an include and not via a forward (see how ExtendFormAuth forwards to login page!)

Is there a better channel to share some thoughts wrt plink given we have experience from a real-life, production deployed installation?

Thanks