not executable
stop redirecting clients on auth failures. this needs to improve.
make redirects for non-klaxon useragents