A little closer to working auth/login
 - Still needs work with ajax login, csrf correctness