dispatchUser() should use a 302 http status code