Fixes: 1) Ensure safe next URL handling with host validation; Extra: 1) Introduce new i18n module with language normalization and translation support; 2) Add route for language setting endpoint.