Move choice of redirect response to controller that requires private user