add login view and csrf for client