send redirect from / to OnlineMoney.html - seems like the security-check applied to all of /