add redirect config option.

defaults to true, which mimics existing behavior. if
set to false, middleware doesn't redirect to app_path
but passes request through to the app.