Insecure Https Redirect Pattern Design