fix redirect for POST by ensuring headers get written & returned
session based flash messages