login page "from" support
use proper HTTP status code, redirect