allow redirect toexternal url of cas server.
sometime validate is kept internal...