Return the email and password form fields
Makes sure that the email submitted is a legal email address and that there's a user in the database with it.
Actually check the user's password. If it's right, log them in. Otherwise, throw an error.