Challenge 2 / 2

Janeway closed her browser days ago. She's back today and the remember-me cookie logged her in automatically, without her typing anything. She opens /admin/user, which now requires IS_AUTHENTICATED_FULLY. What happens?

She's sent to the login page to enter her password again - the remember-me cookie isn't enough.

She gets a 403 and no way forward, since remembered users are denied outright.

She gets in - IS_AUTHENTICATED_FULLY only shuts out anonymous visitors.

Her remember-me cookie is deleted and she's logged out completely.

Rewatch the video