I just realised I put this here intending to factor out the hard-coded `redirect_to` bits but didn't. Whoops.