Fixed bug causing CSRF token not to rotate on login.

Thanks Gavin McQuillan for the report.