I'm not sure I explained it correctly in the question title, so here's the details:
Login
controller:
function authenticate() {
if ( authorized ) {
redirect('lobby');
} else {
redirect('login');
}
}
Lobby
controller:
function index() {
//load lobby view
}
What happens is that in the login page, I enter user / pass, click Login, then authenticate()
is called, and redirects me to the Lobby
.
However, when I click refresh while on the Lobby, the login form gets submitted again, so I get "logged in" again. How do I prevent that from happening?