Simple APM + irule question

I have a relatively easy Access Policy, but have one little thing I need help with.

 

I have a policy applied to a virtual that essentially displays a decision box. If they select yes they go through a password reset process. If they select NO...well, that's the issue.

 

If they select yes they go through the password reset process. At the end of that I display a message box saying "you successfully changed your password" and by default there is the "select continue" option. When they select continue i essentially have it mapped to "allow" but what I would like to do is redirect them to an external web site once that select continue.

 

Furthermore if the user gets to the virtual and selects "No" on the initial decision box I just want to redirect them to an external site.

 

I can easily write an irule that looks for the http_request and redirects them, but apparently this takes place before the access policy kicks in.

 

So how do I make it so that:

 

1. user goes to virtual server IP
2. user gets access policy
3. If user selects "no" on initial decision box they are kicked to an external website
4. If user selects "yes" they continue on through the access policy and at the end when they click "continue" from the message box they are then forwarded to the external website.

Once again, I thought it would be as simple as putting an irule on the resource and then just making it so that if they select "no" the action was "allow" - which in turn would let them access the resource which would invoke the irule and send them to the site, but like I said the irule is hitting before the access policy so my whole process is kind of messed up now.