Django 1.4 requires the csrf token for posts.

The old login form copied from django 1.1's admin directory was missing it.

diff --git a/htsworkflow/frontend/templates/registration/login.html b/htsworkflow/frontend/templates/registration/login.html
index 1f053df6e6538c96311fb1afb11b8be56b6e109b..2bf2456699edde4f050cae8a4793015be900e55d 100644 (file)
--- a/htsworkflow/frontend/templates/registration/login.html
+++ b/htsworkflow/frontend/templates/registration/login.html
@@ -16,6 +16,7 @@
 <div id="container">
     <h1>Login</h1>
 <form action="{{ app_path }}" method="post" id="login-form">
+  {% csrf_token %}
   <div class="form-row">
     <label for="id_username">{% trans 'Username:' %}</label> <input type="text" name="username" id="id_username" />
   </div>