Make sure we redirect to a safe_url

This prevents http://127.0.0.1:5000/login/?next=https://google.fr from
working
Bump to 0.6.3 and adjust documentation as needed