User authentication with form and controller action