Adds an anti-XSRF token to the initial login form to allow direct login to /admin...