You can visit the site if you're not logged in, but login attempts or sessions where you're already authenticated are borked.