fc18239b97
SessionExpiry renders inside MainLayout, which also wraps the login page. For a user with a still-present auth cookie but an expired expires_at claim, it redirected /login back to /login indefinitely. It now skips the redirect when already on the login page.