Fix CSRF handling, esp. when errors occur in form

1 files changed, 3 insertions, 3 deletions

diff --git a/auth.go b/auth.go
index 2027827..c503da4 100644
--- a/auth.go
+++ b/auth.go
@@ -119,9 +119,9 @@ func loginPage() http.HandlerFunc {
 		if session(r).Authenticated {
 			http.Redirect(w, r, "/", http.StatusFound)
 		}
-		showLoginPage(w, User{
-			Csrf: CsrfField(r),
-		})
+		u := User{}
+		u.SetCsrfField(r)
+		showLoginPage(w, u)
 	}
 }