football2801
d6c21659f0
CI / test (push) Has been cancelled
- Login Twig template: styled to match register page; inline "Incorrect email or
password" on both fields (no email-existence disclosure); aria-invalid on error
- security.yaml: always_remember_me: true — REMEMBERME cookie set on every login
- Logout: /logout → session invalidated → 302 /login (Symfony firewall handles it)
Verified: correct creds → 302 / + REMEMBERME cookie; wrong creds → 302 /login +
inline error on re-render; logout → 302 /login; GET / after logout → 302 /login
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>