Reject cookie auth if login request is from standard login form