{% translate "This site is password protected" %}
{% translate "Enter the password to continue." %}
{% if error %}{{ error }}
{% endif %}
{% comment %}
No CSRF token by design: WafMiddleware intercepts POSTs to the verify
path before URL resolution and the CSRF middleware run, so a token
would never be checked here. This is safe: an attacker cannot CSRF
this form to any effect without also knowing the password (a wrong
password just re-prompts).
{% endcomment %}