    def test_login_missing_code_post(self):
        response = self.client.post('/accounts/login/code/')

        self.assertEqual(response.status_code, 200)
        self.assertEqual(response.context['form'].errors, {
            'user': ['This field is required.'],
            'code': ['This field is required.'],
            '__all__': ['Unable to log in with provided login code.']
        })
The application stores sensitive information in cleartext within a resource that might be accessible to another control sphere.