properly serving user-specific config, using ugly redirect hack...