allow POST in RedirectCallback