redirect() now sends a 'Moved Permanently' HTTP code

This is needed to prevent, seemingly random, CSRF check failures when the browser re-sends POST data to the new URL.