Fix: directory traversal in tag URL
redirect to recipe after creation