Use location.hash instead of url query params
Show avatar
Always show the login form