The reason you're seeing a redirect is that there's an implicit conversion from a String
to a redirect to / (by default) with a Lift error notice set.
The string is used as the value of the error notice, which you can see displayed if you have Lift notices included on the page. It looks like the implicit is called strToFailMsg
.
The recipe Access Restriction by HTTP Header in the Lift Cookbook touches on this briefly.