--server option no longer exists
Disable csrf protection in the login controller
Add flag to switch treatment of 302 response codes