Just because there is a Location: header does not mean we should not send

a body.  Broken by HSTS enhancement.

There's a (small) possibility that the HSTS enhancement is now broken.