Add URL info page
Duplicate shortUrlClicks as longUrlClicks (goo.gl compatibility), add lastClick (M29 extension)
Fix (non-)XSS vectors in redirect.php

Note that there should be no way to take advantage of these fixed
vectors.  The redirect body is not normally rendered by the browser, and
newlines in a header are already trapped and rejected at the PHP
execution level.