http: limit redirection depth