urls: Break out of the BSA's frame for all external URLs

All external urls need target="_blank" to break out of our frame.
Merge pull request #18 from colonelqubit/fix-url

urls: Break out of the BSA's frame for all external URLs