Added full search in front-end, authorization works as intented

Instead of using Forward, uses Redirect - fixes bug that allowed
accessing page without sufficient permissions.