Add protections for open redirects

[tommyschaefer]

Currently the proceed_to URL has no verification on it. This means that someone could accidentally use a proceed_to URL that's external to the Rails app. This presents a security risk because identity information would be available through the request parameters.