It isn’t really a flaw. It’s just how the client-side is. You might want to consider checking this Bypass user login - #2 by rickhurlbatt
@rickhurlbatt makes a wonderful point here
Also, I have demonstrated Server-Side routing here which relies on server to return forms. You can try to build something like that. Although unless you want the additional benefits that it provides, I will suggest sticking to the above advice