Refactored auth logic: a account/login post action has been defined to process the auth token.