use 307 to redirect client