Child of #26.
The frontend login page should POST a populated login JSON to the backend. This will include creating a validator for the login JSON. If the backend is not capable of accepting this request, they will create a dummy handler, akin to react2.php