Handle login screen as well (no cookie header field in request)