Rework remote_login and remove protect decorator