Remote Follows Can Create Follow On Wrong account
Reproduce: 1: Log onto an account on your Social instance which is not the account you want to subscribe with, differentuser@site. 2: Go to a remote OStatus site, click remote follow. 3: Put in normaluser@site as who will be following. 4: Click subscribe. This redirects you to the confirmation page on your instance. 5: If you confirm on this confirmation page, differentuser will be subscribed, not normaluser.
What should have happened: An error message indicating that you are logged in as differentuser and this subscription is meant to apply to normaluser.