3.9 browser form, https Origin + CSRF, RIGHT password: ok
3.9 browser form, WRONG password: POST /en/user/login -> 200 (refused)
3.9/0.7 phone-app route /allauth/app/v1/auth/login, RIGHT password: http=200 keys=['access_token', 'is_authenticated', 'refresh_token', 'session_token']
        the API with that token: http=200
3.9/0.7 phone-app route /allauth/app/v1/auth/login, WRONG password: http=400 keys=['errors', 'status']
1.8 unknown page through traefik: http=404 debug-page=False traceback=False
