Fix open redirect in to_slug