refactor login, extracted csfr token