Allow customization of some pages; allow serviceless login; correct logout.
The `service` parameter should only be POSTed from the login page if it was present when GETting the page.