Account Login

Scenario

Password changes require a hidden field tied to the user's session. Posts missing that field should fail safely. Confirm the protection works, then record the lab's verification flag.

Your approach

1. Inspect the password form for a hidden token field name.
2. Send a POST with new password values but omit the token.
3. Read the error indicating the token is invalid or missing.
4. Note the lab's success message for proving the form is protected.
5. Submit the task flag associated with this verification step.