form and redirection handling

* form data is transmitted
* redirection is transparent to end user
* FIXME: form targetting another URL can't get back to origin page