LP#1314827: On login, don't allow referer-based redirect to external site