There is a hidden redirect field but that is in the url of the post request. There is no javascript, and I have tried to load the page and get the cookie first, but after that request the cookie is invalid so it doesn't work in the next request when trying to do the post.