use the redirect_to parameter on bruteforce
rspecs