Creates an Ajax-based endpoint for Auth

I do this because some browsers only ask to remember passwords if they detect a standard form submission. So we check via Ajax first, then submit the form without ajax. Has the added benefit of making it unlikely to have an incorrect autocomplete in your keychain.

Also made Mr. Buckets shake his head if there's an error.