Switch to iframe-based redirection

A 30x http redirect alone won't get rid of the referer.