Added escapeHtml() to redirect

Added escapeHtml() to the redirect parameter to prevent potential cross-site scripting.
Fixed XSS leak in register form
Merge pull request #237 from RickKuipers/patch-1

[XSS] Added escapeHtml() to redirect