Clear unnecessary imports.
login update
CSRF token regenerated on each new form request. Setpassword fix.
Validate password using 3rd party library.
Block user on 3 failed logins implementation.