Remove TODO about Base-64 encoded parameters because it's hard to figure out whether some text is Base64 or not
Move the <meta http-equiv="refresh" /> code to its own (reusable) subroutine