23025: Fix double redirect.

23025: Fix double redirect.

Previous code did not use the query token to look up the container, so
the first request would fail the container lookup and send a 303
moving the token to a cookie, and the resulting second request would
succeed at the container lookup only to find the container UUID does
not match the client's cookie, and send another 303 to clear site
data.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@curii.com>