tanweer919
d79da8cd6a
/portal/onboarding is only a step in the Google sign-in flow. Redirect to login unless the login page's onboard_email handoff hint is present (and the session is authenticated), instead of showing an empty form on direct/typed URL access. Hold rendering until the check passes to avoid a form flash, and clear the hint once onboarding completes so it can't be reused.