fix bug 892639 - Don't allow external REDIRECT urls

Let me know if there's a better way to do this, but I thought this makes enough sense.