https://stackoverflow.com/questions/18679982/follow-redirect-302-in-xmlhttprequest seems to suggest that you need to do something explicit for following the redirect, but maybe that changed in recent browsers?