Add a config option to specify a whitelist of domains that a user can be redirected to after validating their email or phone number.