Explicitly include the HTTP Login scanner

This should be the last commit that fixes #3904.