Don’t get clever with login forms