httpresponse: add about lock on redirect and setBody