Tokenised redirect after POSTs from home view, closes #21