As previously discussed, a 303 might not actually be appropriate here, as clients will try to GET the Location header (which isn't quite the right behaviour).