<h1>Auth 2</h1>
{% if error %}
  <p>error code: {{ error['code'] }}</p>
  <p>error msg: {{ error['error'] }}</p>
{% end %}
<form method="POST">
  <input type="hidden" name="_xsrf" value="{{ handler.xsrf_token }}">
  <input name="user">
  <input name="password" type="password">
  <button type="submit">Submit</button>
</form>
