Add session_write_close before redirect. This seems to solve at least part of the "you must be
logged in" problems, and doesn't harm otherwise.