Implement a /login handler.