Try to use /login straight, just for testing. This has to be solved
later.

Also, ACL wasn't setting the user correctly.