Comma support in return_to

Our app has a lot of commas in the fragment identifier/hash portion of our urls. We realize that this is an uncommon use case, but as far as we are aware it does not violate any standards.

This pull request adds a test for, and support for commas in the return_to url, which is needed for our openid install.