'Log into an account.
`rem` specifies whether or not the session cookie returned should last
beyond the current browser session (that is, if `rem` is `True` the
cookie will have an explicit expiration far in the future indicating
that it is not a session cookie).'

@csrf_exempt
@cross_domain(allow_credentials=True)
@validatedForm(VLoggedOut(), user=VThrottledLogin(['user', 'passwd']), rem=VBoolean('rem'))
def POST_login(self, form, responder, user, rem=None, **kwargs):

    kwargs.update(dict(controller=self, form=form, responder=responder, user=user, rem=rem))
    return handle_login(**kwargs)
