refs #9: redirect uses url_for