should not be using redirect_to for serving asset