Refactor spiked SecureUser so that all access through Auth passes through SecureUser
Hide the login form after the login button is pressed while waiting for the server to respond