login always returns 200
When logging in, request always returns a 200, even when providing false credentials. Frontend is fetching 'current' user (which is no user at all) also returning a 200, showing all menu items while in reality im not logged in.