removed redirect; now GET /grants will 404