use rex_url or rex_context, and use rex_response::sendRedirect
do not reuse cookiekey