JavaScript is DISABLED. The code after # cannot be read server-side without JS. Use a URL like /leave?code=YOURCODE instead.