X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~mdw/git/chopwood/blobdiff_plain/a2916c0635fec5b45ad742904db9f5769b48f53d..ac377b4f58b7cadc87c2e515708e36d6f0f18b37:/httpauth.py

diff --git a/httpauth.py b/httpauth.py
index 22648dd..e29686c 100644
--- a/httpauth.py
+++ b/httpauth.py
@@ -257,9 +257,10 @@ def cmd_auth(u, pw):
     CGI.redirect(CGI.action('login', why = 'AUTHFAIL'))
   else:
     t = mint_token(u)
-    CGI.redirect(CGI.action('list'),
+    CGI.redirect(CGI.action('list', u),
                  set_cookie = CGI.cookie('chpwd-token', t,
                                          httponly = True,
+                                         secure = CGI.SSLP,
                                          path = CFG.SCRIPT_NAME,
                                          max_age = (CFG.SECRETLIFE -
                                                     CFG.SECRETFRESH)))