"Browse" link on email address verify-success screen doesn't work when logged in

[Adam P]

After verifying their email, a user is presented with a screen that has a "Browse" link. If the user is not already logged into Psiphon, the link works fine (brings the user to the login screen). If the user *is* already logged in, the link brings the user to a page with the Bluebar and a 404 underneath.

Cause:
The Browse link goes to https://proxyaddr/randompath. When the user is logged in, "randompath" is interpreted as a (bad) encrypted URL. Decryption fails and so 404 is given. If the user isn't logged in, "randompath" is interpreted as the login page location.

Possible solutions:
* Have e.php (the verification page) log out any existing sessions.
* Make the server interpret the path differently depending on the state of the user.
* Don't have any link on the verification page. (Not very nice.)

Low priority, since the end state isn't terribly fatal. (User can just put a new address in the Bluebar.)

[Adam P (adam+)]

This problem is more general than I initially thought. For example, another reproduction scenario:

* Proxy's "random" path is something other than /001/
* User goes to https://proxy/path and logs in.
* In other tab, user goes to https://proxy/path again.
* User gets Bluebar over 404.

[Adam Kruger (adam-kruger)]

Fixed by removal of url encryption (bug #457474)