Refs #3 - Do not use user's 'next' URL if it is not safe, i.e. do not redirect to arbitrary remote locations.
Merge pull request #4 from novapost/3-safe-redirect-url

Refs #3 - Do not use user's 'next' URL if it is not safe