okay, finally got a working redirect vuln