The `url.redirectURL` parameter is now ignored if it is not relative to the current domain (i.e. it must start with `/`).