Activation link usage destroys(?) other logged-in account
I have my normal account, and I was creating a testuser account.
The testuser account was being registered in a private-browsing tab, and the e-mail was sent to an alias of my e-mail. I received the activation link for testuser2 and clicked the link in my e-mail, which opened it in a new tab in my primary browser session.
When I noticed what I did, the page said Loading with the spinning circle, and I closed the tab. From that point on, my primary account is gutted. My datastore lists four users, no passwords, no shared entries. The Groups section lists pending requests for two groups.
I tested this again with the testuser account, but it was empty to begin with. I then created a credential and created another account and activated over the testuser account, but that didn't reproduce this issue.