Now checks the CSRF token when logging in
Move the login off the index and onto admin/login