307 rather than 302 to prevent POST values from being thrown away.