I disabled the login form because it's available over HTTP