Consistency with "fix redirect"

Commit 74b8abe9cf9b4afa19a31f6374c23b6d1cccc919 fixed a security hole by blocking redirection to "any specified url", instead only permitting redirection to a route name. This doc update for consistency.