Fixed AJAX redirect()s, dropped usercp HTTP_REFERER