Reply to thread

A program not behaving as designed is the definition of a bug.

The program clearly instructs users to "press back, refresh, then try again".  You can see those instructions were repeatedly followed, and variations were attempted, nothing worked.

If the intended behavior is as shown, I would recommend re-wording the displayed text, and after the security token expires the ACP should be changed automatically to the login screen.