FIX: BAD CSRF on login. Don't check csrf in the fake login form since it doesn't actually do anything.