Refactor login logic to the login widget.

**DO NOT MERGE**

A little work needs to be done yet.
I find this line too vague. What checks?