This application makes flawed assumptions about the sequence of events in the login process.