Login with redirects, checks if redirect url safe