The /auth/forgot_password/verify/ URL seems to translate the empty string somewhere, somehow.

See http://mediagoblin.com/u/elrond/m/screenshot-GMG-1/

Errors are like so:

Error - <type 'exceptions.AttributeError'>: 'BaseResponse' object has no attribute 'vary'
URL: http://mediagoblin.com/tag/barcelona/atom/
File '/srv/mediagoblin.com/lib/python2.6/site-packages/Paste-1.7.5.1-py2.6.egg/paste/exceptions/errormiddleware.py', line 144 in __call__
  app_iter = self.application(environ, sr_checker)
File '/srv/mediagoblin.com/lib/python2.6/site-packages/Beaker-1.6.1-py2.6.egg/beaker/middleware.py', line 155 in __call__
  return self.wrap_app(environ, session_start_response)
File '/srv/mediagoblin.com/src/mediagoblin/mediagoblin/app.py', line 175 in __call__
  m.process_response(request, response)
File '/srv/mediagoblin.com/src/mediagoblin/mediagoblin/middleware/csrf.py', line 101 in process_response
  response.vary = (response.vary or []) + ['Cookie']
AttributeError: 'BaseResponse' object has no attribute 'vary'

It looks like there is no response.vary, which is what is causing this error...