Login only if not already logged-in.
Turns off CSRF protection for auth_callback.
Removes migration that references redundant UID column.