Safer sign-in and connect flows

We strengthened the sign-in and connect-your-AI flows so they can only ever return you to a real LVL Up page, never to an outside site dressed up to look like us.

• After you log in or confirm your email, you always land on a real LVL Up page
• An application that asks to return you somewhere it did not register is stopped
• Nothing is authorized when a return address does not match
• Trust hardening across login, email confirmation, and the connect flow