@laujensen so say a user tries to access a disabled url, it comes back 302, but then when they go to a legitimate one it also doesn't work?

@weavejester & @sova -> turns out a max-age cache value was added somewhere down the line, so the browser wouldnt re-request