When login_url() is called from a different app (e.g. cart), the anonymous cart_sid is in that app's session cookie. Pass it as a query parameter so the auth app can store it and use it for adoption. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>