XSRF Bug solved + Login delay if password is wrong