Scenario:

• log out
• access http://sho.rt/http://somelink
• as expected the login form is displayed
• log in
• the page dies with an "Unauthorized action or expired link" and the link isn't added.

Clicking on the logo confirm we've been correctly logged in, but yourls_die() was called before the link was added.