* needs to re-query csrf after the host has changed (blur) * on successful login, save settings and move on * on error, there needs to be some feedback
