update: better check.

src/routes/+layout.svelte

@@ -70,7 +70,13 @@
             '/hackathon',
             '/mfa'
         ];
-        const acceptedAuthenticatedRoutes = ['/console', '/invite', '/card', '/hackathon'];
+        const acceptedAuthenticatedRoutes = [
+            '/console',
+            '/invite',
+            '/card',
+            '/hackathon',
+            '/recover'
+        ];
 
         const pathname = $page.url.pathname;
         const user = $page.data.account as Models.User<Record<string, string>>;

src/routes/+layout.ts

@@ -17,9 +17,6 @@ export const load: LayoutLoad = async ({ depends, url }) => {
         url.searchParams.delete('forceRedirect');
     }
 
-    // logged-in user can recover-password!
-    if (url.pathname === '/recover') return {};
-
     try {
         const account = await sdk.forConsole.account.get<{ organization?: string }>();