Fixes `reply.redirect()` issue and updates to HAPI 6.x

`reply.redirect()` doesn't set `response.source` it seems. This patch fixes that and updates to latest HAPI.