nit: can we change this to `REDIRECT_HOME_URLS` while we're in here? Since the `edit_profile_url` doesn't loop - it just throws the 403.