On Mar 8, 2011, at 1:37 PM, DenesL wrote: > > On Mar 8, 1:06 pm, Jonathan Lundell <jlund...@pobox.com> wrote: >> Try making the requests with curl -I and see if there's a chain of redirects >> that might offer a clue. > > Maybe you meant curl -1 (minus one), > using this option I get the default layout with the two forms, no > redirection (?).
-I shows the headers. -1 is a TLS option. After you get the two forms, fetch the logout URL and see if that gives you a redirect to user/profile. I took a look over the code and it wasn't at all obvious how that would happen. Normally, the only case where you go silently to user/profile is when a logged-in user goes to user/register, which makes sense.
