translated login errors, added login csrf protection