fix bug 847190 - use django is_safe_url

https://bugzilla.mozilla.org/show_bug.cgi?id=847190

Make sure https://developer-local.allizom.org/en-US/users/logout%253f%3fnext=%252f%252fgoo.gl/yY9B5&paddingpaddingpadding doesn't show XSS