use redirects to avoid POST popup