updated js redirect with url param reading ... scary