LPS-47482 Redirect parameter is not escaped in *AutoLogin