can't shake the fakey feeling. net/http expects one handler max. the way we currently detect redirect param is not one handler.
we should refactor the code out to be called from different handlers
also, wtf is /settings/novelFontType?noredirect=t&r= (redirect or no redirect?)
suggestion: Use Referer. the header exists for a reason. might need to turn off CSP for that.