Fix unvalidated redirects

Thanks, Brakeman!

http://brakemanscanner.org/docs/warning_types/redirect/