Added a custom login page. Leveraging Spring security for CSRF
protection required server-side page templates - switched from our own
lightweight web server to Thymeleaf for that purpose.