diff --git a/auth/assets/templates/login.html.tpl b/auth/assets/templates/login.html.tpl
index f398f175c..af6c75eae 100644
--- a/auth/assets/templates/login.html.tpl
+++ b/auth/assets/templates/login.html.tpl
@@ -92,7 +92,7 @@
 	{{ range .providers }}
 		<a href="{{ links.External }}/{{ .Handle }}" class="btn btn-light btn-block btn-lg mb-2 mt-1 text-dark">
 			<i class="bi bi-{{ .Icon }} mr-1"></i>
-			{{ tr "login.template.external.login-with" "idp" (coalesce .Label .Handle) }}
+			{{ tr "login.template.links.external.login-with" "idp" (coalesce .Label .Handle) }}
 		</a>
 	{{ end }}
 	</div>
diff --git a/auth/assets/templates/sessions.html.tpl b/auth/assets/templates/sessions.html.tpl
index 36208d5e7..3aabffd41 100644
--- a/auth/assets/templates/sessions.html.tpl
+++ b/auth/assets/templates/sessions.html.tpl
@@ -1,18 +1,25 @@
 {{ template "inc_header.html.tpl" set . "activeNav" "sessions" }}
 <div class="card-body p-0">
-	<div class="card-title p-3 border-bottom">
-		<h4 class="card-title d-inline">{{ tr "sessions.template.title" }}</h4>
-		{{ if .sessions}}
-		<button
-			type="submit"
-			name="delete-all-but-current"
-			value="true"
-			class="btn btn-sm btn-danger float-right"
-		>
-			{{ tr "sessions.template.delete-all" }}
-		</button>
+	<form
+		method="POST"
+		action="{{ links.Sessions }}"
+		class="p-3"
+	>
+		{{ .csrfField }}
+		<div class="card-title p-3 border-bottom">
+			<h4 class="card-title d-inline">{{ tr "sessions.template.title" }}</h4>
+			{{- if and .sessions (gt (len .sessions) 1) }}
+			<button
+				type="submit"
+				name="delete-all-but-current"
+				value="true"
+				class="btn btn-sm btn-danger float-right"
+			>
+				{{ tr "sessions.template.delete-all" }}
+			</button>
 		{{ end }}
-	</div>
+		</div>
+	</form>
 	<form
 		method="POST"
 		action="{{ links.Sessions }}"
diff --git a/auth/handlers/handle_sessions.go b/auth/handlers/handle_sessions.go
index 466a55450..d04da6657 100644
--- a/auth/handlers/handle_sessions.go
+++ b/auth/handlers/handle_sessions.go
@@ -78,7 +78,7 @@ func (h *AuthHandlers) sessionsProc(req *request.AuthReq) error {
 		t := translator(req, "auth")
 		req.NewAlerts = append(req.NewAlerts, request.Alert{
 			Type: "primary",
-			Text: t("session.alerts.delete-sessions-but-current"),
+			Text: t("sessions.alerts.delete-sessions-but-current"),
 		})
 	case len(req.Request.PostFormValue("delete")) > 0:
 		for _, s := range ss {
@@ -94,7 +94,7 @@ func (h *AuthHandlers) sessionsProc(req *request.AuthReq) error {
 		t := translator(req, "auth")
 		req.NewAlerts = append(req.NewAlerts, request.Alert{
 			Type: "primary",
-			Text: t("session.alerts.session-deleted"),
+			Text: t("sessions.alerts.session-deleted"),
 		})
 	}