[Login] Add CSRF protection support

This PR fixes #250