gustafn
committed
on 31 Oct 19
don't trust login_cookie, when no session_cookie is provided