Have login-checks and CSRF checks