Session#login: Override scope when parsing forms