Fix bug in SSL redirect that killed status updates

The "status" parameter was getting overridden by the HTTP response
status code. So something like:

http://freeobjectivistbooks.org/donations/887/status/edit?status=read

would redirect to:

https://secure.freeobjectivistbooks.org/donations/887/status/edit

*without* the status=read parameter. Unfortunately, that's a 404.

This fixes the bug by creating the redirect URL from the options/params,
then passing that and the HTTP status separately to redirect_to.