Moving to real login form instead of HTTP basic auth