Fixes #3878 registering the security token action as an external page

diff --git a/engine/classes/ElggSite.php b/engine/classes/ElggSite.php
index 40bfca0604b574ba21c1e120a8953f1c0da5ff29..44929ce217f20fa99763fb15824855467b69e867 100644 (file)
--- a/engine/classes/ElggSite.php
+++ b/engine/classes/ElggSite.php
@@ -413,6 +413,7 @@ class ElggSite extends ElggEntity {
                        'resetpassword',
                        'action/user/requestnewpassword',
                        'action/user/passwordreset',
+                       'action/security/refreshtoken',
                        'upgrade\.php',
                        'xml-rpc\.php',
                        'mt/mt-xmlrpc\.cgi',