that is the confirmation, for the secret-login.

url('small-user-auth', ['action' => 'secret-login', 'code' => $this->code], ['force_canonical' => true]); ?>