redirects determined by a whitelist of request controllers and verbs

see the former pull request [here](https://github.com/tansaku/LocalSupport/pull/199)