Password first, then your passkey. On success you are redirected to the protected page - a brand new request that only works if the login was persisted to the session.
back