Extract login actions to their own controller.