Mutlifix

internal/web/auth.go

@@ -274,8 +274,6 @@ func (s *WebService) HandleExternalRedirect(w http.ResponseWriter, r *http.Reque
 	if !ok {
 		// Not authenticated is fine — just show the warning without nav
 		data = &ViewData{Title: "External Redirect"}
-		token, _ := auth.SetCsrfCookie(w, r, CsrfCookieName)
-		data.FormToken = token
 	}
 
 	data.Redirect = target