Calling only CSP and MCB on redirects; also adding a testcase for MCB verifying that works correctly