User logged-in can access to /# using browser "go back" after login success

[panpansh]

First thanks for this.
Like specified in title,
when a user is logged-in, he can access to /# using browser "go back"
(if I refresh from "/#", redirect to "/" ok)

@auth_bp.route('/#', methods=['GET', 'POST'])
def login():
    """
    Log-in page for registered users.
    GET: Serve Log-in page.
    POST: Validate form and redirect user to dashboard.
    """
    if current_user.is_authenticated:
        print(current_user.is_anonymous)
        return redirect(url_for('main_bp.dashboard'))  # Bypass if user is logged in

When I go back (after login success) "current_user.is_authenticated" never printed like they don't go here :/
(same with the print before the if).
Can you explain please if you see something ?
Regards

[panpansh]

same like i'm logged-in and here : "/session"
writing "/logout" ok and now I go back from browser: result => I'm displaying session page (no redirect).
(if I refresh, redirect to "/#" ok)
Regards.