Adds a feature where applications can define which URLs are safe to redirect to.

Thanks to Christian Iacullo for reporting it.

Fixes #24