Fix issues and hide token

This adds a redirect but hides the ticket query parameter 
also fixes the bug in read_service_url where the  Rack::Utils.build_nested_query never was used and :ticket was invalid as now we are dealing with a string not a token