Returns the next of params when it is a path on this site, or null. Anything else, //elsewhere.example included, is ignored, so a link can't send someone off the site through the login page.