Revert RedirectResponse changes

[jim-parry]

Address issue raised in #1501 #1492

[lonnieezell]

This was originally forced to use route instead of to to make it difficult to redirect to pages outside the site on accident. This was inspired by OWASP's 2013 Top 10 list, Unvalidated Redirects and Forwards. It is no longer in the Top 10 list, but still a decent security precaution, I believe.

[jim-parry]

It was originally ->to)_, and I changed it to route(), which made more sense to me.
This got reverted to to() trying to nail down the culprit for the blank pages, but this wasn't the cause.
Are you suggesting this should remain on "route()" when the dust settles?

[lonnieezell]

I think it's a good security thing, yes, even though it might be a bit less user-friendly. I'm not 100% convinced it's crucial so if it causes issues with users, i'm fine leaving it at to and letting them control their own fate. It's simpler to use that way.