redirects determined by a whitelist of request controllers and verbs
merge with white_list
added test for after_accept_path_for