redirect to settings if ($isLoggedIn) { header('Location: /settings'); exit; } // Generate before HTML so the anonymous form cookie can be sent. header('Cache-Control: private, no-store'); $csrfToken = localnh_csrf_token(); // Favicon configuration loader $faviconHtml = getFaviconHtml(); ?> login - <?= htmlspecialchars($siteName) ?>