merged develop

lib/view/login/guardian_login_controller.dart

@@ -11,6 +11,7 @@ import '../../api/marianumconnect/queries/auth_guardian/guardian_login_exception
 import '../../auth_link/device_binding.dart';
 import '../../auth_link/guardian_login_link.dart';
 import '../../auth_link/pending_guardian_request.dart';
+import '../../model/session_wipe.dart';
 import '../../session/session.dart';
 import '../../session/session_manager.dart';
 import '../../widget_data/widget_sync.dart';
@@ -216,6 +217,9 @@ class GuardianLoginController extends ChangeNotifier {
   }
 
   static Future<void> _defaultSignIn(Session session) async {
+    // The previous account's wipe runs deferred; racing it would let it
+    // clear what this login stores.
+    await SessionWipe.done;
     // Sign in first: the one-time code is already spent at this point, so a
     // failing widget reset must not cost the session (the user would have to
     // request a fresh mail for a login that actually succeeded).