Adding redirection support to enforce confidentiality in core.

This pull request adds redirect support within the core module where confidentiality is required.

The servlet changes are almost complete and will be sent tomorrow - I just need to complete some AS integration to verify the approach there before that part is sent.