Login now properly works, and it shouldn't be possible to get around it