Cross-origin redirect test