XHR redirect urls returned as JSON body.

![](http://media.giphy.com/media/10kMVixrFmPifK/giphy.gif)

Can't redirect XHR requests, need to send it back for the client to decide what to do with it.