From 6212e550d268b5e2236a7b9951049584a6b3e8fa Mon Sep 17 00:00:00 2001
From: matresstester <anthony.tsui@gmail.com>
Date: Fri, 27 Jun 2014 04:11:03 -0700
Subject: Hijacking the destroy action for bad passwords #19

---
 routes/sessions.coffee | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/routes/sessions.coffee b/routes/sessions.coffee
index a04c108f..9b4c4126 100644
--- a/routes/sessions.coffee
+++ b/routes/sessions.coffee
@@ -21,4 +21,8 @@ module.exports = (passport) ->
 
   destroy: (req, res) ->
     req.logout()
-    res.redirect('/login')
+    res.render('sessions/new',
+      js: (-> global.js),
+      css: (-> global.css),
+      badpw: true
+    )
-- 
cgit v1.2.3