Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder