Preferences controller can no longer redirect to arbitrary domains.

It was possible to cause this controller to redirect to an arbitrary domain.

This has been stopped as it could have reputational issues