Simplify form-based authorization endpoint, this should as default.