Handle auth in authenticated state.

This can happen if the user hits the back button and re-submits
authentication. In that case it appears as if user name or
password will work. Let's generate an error screen for that
case to inform the user what is going on.

1 files changed, 3 insertions, 0 deletions

diff --git a/main.txr b/main.txr
index 35ec80f..cb58078 100755
--- a/main.txr
+++ b/main.txr
@@ -25,6 +25,9 @@ REMOTE_ADDR=@clientip
 @(if session-valid-p)
 @  (skip)
 @  (cases)
+QUERY_STRING=auth
+@    (error-form "Redundant Authentication" "You are already logged in")
+@  (or)
 QUERY_STRING=logout
 @    (remove-session cookie-userid)
 @    (login-form "Logged out; you may log in again.")