use redirect header that actually works