{% extends shell('login') %}

{% block title %}{{ heading }}{% endblock %}

{% block content %}

<h1 class="h2 mb-3">{{ heading }}</h1>

<div class="row">
    <div class="col-md-6">
        {# The GET only shows this button, so a mail scanner that opens every
           link confirms nothing. The POST, with its CSRF token, does. #}
        <form method="post">
            {{ form.hidden_tag() }}
            <p>{{ text }}</p>
            <button type="submit" class="btn btn-primary">{{ button }}</button>
        </form>
    </div>
</div>

{% endblock %}