allow hardcoded URLs for redirects