session.request defaults allow_redirects to True, so we don't need to explicitly set it here