require token for login

diff --git a/engine/lib/actions.php b/engine/lib/actions.php
index ac63258137203c6d69cfc2cd9d4a33f53b6ef2f8..f78ca63dff915f2fb97b51e6d136e8b89de016c9 100644 (file)
--- a/engine/lib/actions.php
+++ b/engine/lib/actions.php
@@ -65,12 +65,11 @@ function action($action, $forwarder = "") {
        // @todo REMOVE THESE ONCE #1509 IS IN PLACE.
        // Allow users to disable plugins without a token in order to
        // remove plugins that are incompatible.
-       // Login and logout are for convenience.
+       // Logout for convenience.
        // file/download (see #2010)
        $exceptions = array(
                'admin/plugins/disable',
                'logout',
-               'login',
                'file/download',
        );