Test for redirection after login

This merge request includes the following changes:

1. Fix a bug that makes previous test failed.
2. Add a new member function called 'isTrustedUrl()' to check whether an URL is trusted.
3. Use the new function to check the redirect URL before putting it into the cookie and redirecting.
4. A new PHPUnit test to make sure the redirection is safe.

Ready for review.