[ALLI-2705] Disallow redirection to external sites
[ALLI-2704] Escape followup fields properly in login form.