removes unnecessary admin login controller methods
adds CSRF protection in the admin login form
shows admin login error messages