use drupal_goto instead of html redirect script