Verify Zippy token in redirects (bug 936138)

waiting on a zippy change