{# The social login endpoint only answers POST: the library made it POST-only so that a third-party page cannot make a visitor's browser start an OAuth flow without them asking (login CSRF). The links below are kept exactly as they were - same elements, same classes, same layout, so the page looks the same - and the click is turned into a POST through this one hidden form. #}