Review login controller to be resilient with inappropriate request