To make it less obvious what he is doing, he encodes the redirect parameter, and adds some superfluous parameters to the query string.