Appearance
Requests manipulating data need to supply a CSRF token
Success - returns authentication options