Use verifyNoRedirect instead of calling the request handler directly