Redirect away from POST

Returning OK from these POST endpoints leaves users open to replay attacks.

Those endpoints will now redirect.
I'm not happy about this...