Validate redirect destination on login

Validate that the session stored redirection location is a sane URL
before redirecting to it. Also stop saving redirection URLs for non-GET
initial requests as redirecting to a POST action doesn't make any sense.

Bug: 58305
Change-Id: Ifa7924082e8392d1741bd5699017c1b5f7087074