> The real URL is in the Location header on /goto. Request that URL. Do not follow the redirect.

what? the Location header is the redirect, no?