Now if a user attempts to log in from a login page with a stale
CSRF token, they will be redirected to the dashboard or, if they
have logged out, to a fresh login page.