Slice(13) was off by one — it dropped the leading '/' before 'totp/' producing /api/v1totp/check-session. Should be slice(12) so the '/' stays.
Slice(13) was off by one — it dropped the leading '/' before 'totp/' producing /api/v1totp/check-session. Should be slice(12) so the '/' stays.