It is not TT's fault that this doesn't work as expected: Browsers don't work that way. If you use refresh (I'd recommend that you check the syntax, you did not specify the intended delay), browsers are not supposed to open a new tab.
Also, hash keys are returned in random order, so you can't say for sure which of the URLs is inserted into the template first.
If you are on Linux and have LWP installed, the easiest way to check your CGI is the following command:
GET http://your-server.com/your.cgi.url/