hasImpersonatedUserId() || !CSRF::validateRequest()) { url_redirect('index'); return; } $impUserId = $authToken->getImpersonatedUserId(); $authToken->removeImpersonatedUserId(); $authToken->applyCookie(); url_redirect( $impUserId > 0 ? 'manage-user' : 'index', ['user' => $impUserId] );