add redirect url check to avoid http response splitting
add java doc for parseAsSingle to attend potential xss problem
split Configuration from Context, now we do not need retrieve Context any more if we only want to get configurations.