Only allow GET and redirect with utility helper, friendly to blocked https