Also do some refactoring to share more common test setup code in supervisor_login_test.go.
Also: - Add CSS to login page - Refactor login page HTML and CSS into a new package - New custom CSP headers for the login page, because the requirements are different from the form_post page