Partial luci implementation of auth pause
Redirect is properly split but nds expects request to come from client