[XSS] Added escapeHtml() to redirect

Added escapeHtml() to the redirect parameter on the login form to prevent potential cross-site scripting.