auth: Handle REQUEST_URI not being authoritative

If _SERVER{REQUEST_URI} does not start with a leading slash, add one. This will ensure that the redirect URL offered after a successful login will be to an absolute url rather than an implied relative one.

Fixes osTicket/osTicket-1.7#858