Logging in with sessions now works via /login