Removed form_authenticity_token from login method