Redirect away from POST

Returning OK from these POST endpoints leaves users open to replay attacks.

Those endpoints will now redirect.
the comment can be the value of the secret :)