GUI-274: Prevent arbitrary redirects in create alarm handler