Redirects now determined by a white list of request controllers and verbs

See title. Some tests were deleted because of the different / simpler implementation. (And also because those tests where just bad -- my fault.)