Our twofactor redirect fails for Trac URLs with @ in them

[jonasbardino]

We see occasional redirect errors when no 2FA session is available and a Trac link with abc123@ku.dk usernames are included in the URL.
We could probably switch the redirect validator to accept the @ without much ado.