// Load #1, load as little as possible because we are in a race to get the loading screen up.
define([
    '/bower_components/nthen/index.js',
    '/api/config',
    'jquery',
    '/common/requireconfig.js',
    '/common/sframe-common-outer.js',
    '/common/cryptpad-common.js',
    '/common/common-util.js',
    '/common/common-hash.js',
    '/common/common-realtime.js',
    '/common/common-constants.js',
    '/common/common-interface.js',
], function (nThen, ApiConfig, $, RequireConfig, SFCommonO,
    Cryptpad, Util, Hash, Realtime, Constants, UI) {

    window.Cryptpad = {
        Common: Cryptpad,
        Util: Util,
        Hash: Hash,
        Realtime: Realtime,
        Constants: Constants,
        UI: UI
    };

    var requireConfig = RequireConfig();

    // Loaded in load #2
    nThen(function (waitFor) {
        $(waitFor());
    }).nThen(function (waitFor) {
        var req = {
            cfg: requireConfig,
            req: [ '/common/loading.js' ],
            pfx: window.location.origin
        };
        window.rc = requireConfig;
        window.apiconf = ApiConfig;
        $('#sbox-iframe').attr('src',
            ApiConfig.httpSafeOrigin + '/debug/inner.html?' + requireConfig.urlArgs +
                '#' + encodeURIComponent(JSON.stringify(req)));

        // This is a cheap trick to avoid loading sframe-channel in parallel with the
        // loading screen setup.
        var done = waitFor();
        var onMsg = function (msg) {
            var data = JSON.parse(msg.data);
            if (data.q !== 'READY') { return; }
            window.removeEventListener('message', onMsg);
            var _done = done;
            done = function () { };
            _done();
        };
        window.addEventListener('message', onMsg);
    }).nThen(function (/*waitFor*/) {
        if (!window.location.hash) {
            window.location.hash = localStorage[Constants.userHashKey] ||
                                   localStorage[Constants.fileHashKey];
        }
        SFCommonO.start();
    });
});

@@ -1855,32 +1855,20 @@
         
-window.location.
+var 
 hash = l
@@ -1905,11 +1905,9 @@
 Key%5D
- %7C%7C
+;
 %0A   
@@ -1907,33 +1907,45 @@
 y%5D;%0A            
- 
+if (!hash) %7B%0A
                 
@@ -1948,49 +1948,174 @@
     
-      localStorage%5BConstants.fileHashKey%5D
+sessionStorage.redirectTo = '/debug/';%0A                window.location.href = '/login/';%0A                return;%0A            %7D%0A            window.location.hash = hash
 ;%0A  

Improve debug app to redirect to login if no user hash is detected