Fix open-redirect in the login flow

Validates the "to" redirect param in account.go and handle.go

Fixes GHSA-cj57-mx4f-qjp6