Bouke/django-two-factor-auth — pull request #8 by mkruk45 (2013-09-05 18:46:34+00:00)
Title: Use session to store user validation

Passing the user param to the verify_computer view through a url param was a security hole.