Return the email and password form fields
Makes sure that the email submitted is a legal email address and that there's a user in the database with it.
Actually check the user's password.
If it's right,
log them in.
throw an error.