{% load static %} {% comment %} Second-factor prompt. Reached only with a half-authenticated session (password accepted, TOTP outstanding). Standalone for the same reason as login.html: there is no authenticated user yet, so the sidebar chrome must not render. {% endcomment %}