FIX Escape the redirect URL before outputting

Signed-off-by: Stephen Shkardoon <stephen@silverstripe.com>

Should be merged up to 3.1 too (applies cleanly).