Function approved 

fn approved(action: Option<&str>) -> bool

Whether the submitted form approved the sign-in.

Only the exact approve action does. The Deny button, an unknown action and a submission carrying no action at all are all refusals, so a form this server did not write cannot talk its way into a code.