Add pre-alpha login form.
Use generic success and error messages.
Enable CORS in OAuth.