Separate `draw_login_form` from `draw_login`