We will soon get rid of spoof login, replacing it with username/password login to the local silo. This should be very straightforward — copy the existing login page with the buttons and stick some text fields on it. The open question is what route this page lives at, but once we have an answer to that, sticking the page at that route is trivial.