Do not allow redirect to absolute URL