A fresh tab no longer signs the member out everywhere

Shipped

October 28, 2026 at 11:29 PM UTC

Author

Kamo

Commit

2fdd99e

A link opened from an email (e.g. "View your report") lands in a new tab with empty sessionStorage. That tab has no session, goes to /logout, and /api/logout falls back to the shared *** cookie, destroying the session the member is still using. A tab that never held a session now just goes to sign in without touching the shared one.