add tests for redirect on unauthorized patch, post