Use static JNLP URLs; server-side redirect

Sending redirects from the FPI server allows a codebase more specific
than docs.google.com. A codebase URL is required for verification.