It looks like login input fields are not being properly sanitized.
Steps to reproduce:
Access https://crisischeckin-d.azurewebsites.net/Account/Login
Enter one of the following values as username:
<SCript>
'
Result: Server returns full stack trace error