SLING-3443: Parameter based redirection vulnerability in FormAuthenticationHandler