CSRF Fix for Pound-initiated redirects

Rewrites the redirect response from Pound such that crafted url requests cannot cause a Cross Site Request Forgery attack.