Steps to reproduce:
- Open an incognito browser window
- Navigate to https://tools.wmflabs.org/grantmetrics/programs
- Tada! You're in. You can attempt to create a program but that fails due to a JS check, which I could disable in a check I did.
Expected: User gets redirected to login page if they are not logged in at any time.