Add CSRF token to login request. Fixes #1.