Removed anti-forgery token from the Login action.

Because there will only ever be one account, login CSRF is not a threat.