Render failed login form with CSRF token