Fix link in question_base.html
Forbid cross-application sign in.