Bugfixes core: host detection/NEXTAUTH_URL (#6007) (62f672a) core: correct status code when returning redirects (#6004) (2c669b3)