Split out UA spec
Set simpler and stronger requirements for 302 responses