Quick read on how target=_blank is unsafe and the secure way to do it