You need to redirect the user in the then(… block
# security-discussion
r
You need to redirect the user in the then(… block