Open Redirect on trezor.io via /admin Cloudflare Rewrite

A redirect rule on trezor.io accepted unvalidated input into its destination, so a link that appeared to point at our domain could send visitors elsewhere. The rule now uses a fixed destination.