misuzu/public-legacy/auth/revert.php

<?php
namespace Misuzu;

if(!isset($userInfoReal) || !$authToken->hasImpersonatedUserId() || !CSRF::validateRequest()) {
    url_redirect('index');
    return;
}

$impUserId = $authToken->getImpersonatedUserId();
$authToken->removeImpersonatedUserId();
$authToken->applyCookie();

url_redirect(
    $impUserId > 0 ? 'manage-user' : 'index',
    ['user' => $impUserId]
);