Unlock some login-related routes

Fixes assembla-417