Re-enable token finalize() workaround for dev mode.
Add `anonymous_required` decorator and apply to each of the views involved with login to prevent logged in users for seeing e.g. the login screen.