Login should actually just check the boolean that gets returned now rather than look for a 403