adds UnauthorizedWith / InternalErrorWith, changes error param to 'error_msg' (from 'error'), redirects with StatusSeeOther