Fix url parameter displaying arbitrary user input
Check logout url parameter against valid services