Refactor login and separate destination from params.
Fix cosignproxy logout.
Add CSRF tokens to RPC calls.
Add React based login form.