I noticed that when this module is enabled, I am able to "bypass" the authentication by first logging in at example.com/downloader, then click the "Return to Admin" link.
Authentication should either be added to the downloader login or be required before returning to the admin.
I noticed that when this module is enabled, I am able to "bypass" the authentication by first logging in at
example.com/downloader, then click the "Return to Admin" link.Authentication should either be added to the downloader login or be required before returning to the admin.