Added a confirmation code to auto_login URL to fix bug where anyone can login as anyone.