Re-implement same-site redirect chain consideration

[sbingler]

This requirement was removed in #2750 for web compatibility reasons.

We would like to add this requirement back.

See also #2104