Serve the SPA shell for /sessions so the post-login redirect (when password auth is enabled) no longer 404s. Co-authored-by: Skawsk59 <Skawsk59@users.noreply.github.com>