given openproject runs in a subdirectory we cannot allow redirecting to a different subdirectory. also tries to catch shenanigans to circumvent the check like ".." in the path.
Merge pull request #1077 from opf/fix/back_url_verification_again