Check that processLogin only comes from localhost