Fixed open redirect vulnerablity