Set Password page is accessible without token, though it's not functional

Steps to reproduce:
- Open a new tab and go to https://staging.getodk.cloud/#/account/claim
- You would see the "Set Password" box

**Expected behaviour:**

I should be redirected to Home page if I am logged in, otherwise I should see 404 page.

_PS: This is not a security issue, because you can't set any password and you see an error when you press "Set Password" button._