use a temporary redirect when signed in users make a HTTP request

* we don't want their browser to store the redirect permanently