Disabling csrf protection for now, adding 400 status code to errors,
First pass at login form.