Add the login helper; Build the redirect; CS; Switch TFA to use UsersHelperLogin