Change login popup to not send credentials in query string