fix all redirection in ajax and all render to keep response body empty

need to make sure that under ajax 
- [ ] wrong login credential => 401 Unauthenticate
- [ ] wrong programUrl => 404 NotFound
- [ ] unallowed program for this user => 404 NotFound
- [ ] unallowed by ACL for this user's level=> 404 NotFound