Do not allow redirect to absolute URL
Merge pull request #3 from feross/master

Do not allow redirect to absolute URL (fix #2)