lshift/diffa — pull request #238 by paulj (2012-07-26 22:05:15+00:00)
Title: Only allow access to the login html page

The current security configuration means that if a session expires then the page loads, but a "Unexpected Server Error: (200)" keeps appearing. This is because the page is being allowed to load, but then the HTML redirect is occurring on the JSON assets (which can't do anything about it).

This patch changes the configuration such that only the login.html page is unprotected - the rest will ensure that login occurs.