accepting redirect as well as post; redirect not verified