User actions can may as well be unconditional now
Don't emit a new csrf token on checking.
Add JSON views for errors
Capitalize error messages.
Only login registered users.
Display error messages prettily
Remove href from link to avoid weird reload problems
Error messages for login.