a218e253

By: Michael Lynch <git@mtlynch.io>

Redirect signed-in users from replayed magic links

When a valid session belongs to the user who consumed a magic link, redirect a
subsequent use of that link to the root route. Other replay attempts remain
rejected.