Staff login

Use `cancel!`. No need to call `save` explicitly.