changed to client-side redirects instead of iframe (google bans this)