Better handling of return_to URLs--if they are bad, try removing weird charaacters, if they're still bad, ignore it rather than raising an error.