[SECURITY-722] Explicitly set the content type for the login page