[eluser]Doulos[/eluser]
I have a web-app that I've build that I want to keep CSRF Enabled, but I'd like the user to get Re-directed to the Login Page, rather than get this "The action you have requested is not allowed." error.
Any Ideas?
I'm going to be auto-logging them out with JS, but if they have JS off, I would rather them get prompted with the login (Ion_auth if that matters) then get that generic error page with no obvious resolution for the user.
thanks for your help!