fix: add missing return in protected note create handler

src/server/handlers_web.go

@@ -147,10 +147,12 @@ func (h *CreateNoteWithFormHandler) ServeHTTP(w http.ResponseWriter, r *http.Req
 
 	if !h.PageData.AllowNoEncryption && noEncryption != "" {
 		h.WebError(w, logger, ErrEncryptionRequired, nil)
+		return
 	}
 
 	if !h.PageData.AllowClientEncryptionKey && encryptionKey != "" {
 		h.WebError(w, logger, ErrClientEncryptionKeyNotAllowed, nil)
+		return
 	}
 
 	if !h.PageData.AllowClientEncryptionKey && encryptionKey == "" && noEncryption == "" {