Brute forcing the HTML login form