add todo comment

src/client/js/components/LoginForm.jsx

@@ -78,6 +78,7 @@ class LoginForm extends React.Component {
     const { t } = this.props;
     return (
       <div key={auth} className="input-group justify-content-center d-flex mt-5">
+        {/* [TODO][GW-1913] use onClick, and delete form tag */}
         <form role="form" action={`/passport/${auth}`} className="d-inline-flex flex-column">
           <input type="hidden" name="_csrf" value="{{ csrf() }}" />
           <button type="submit" className="btn btn-fill px-0 py-2" id={auth}>

src/client/js/nologin.jsx

@@ -28,6 +28,7 @@ if (installerFormElem) {
 const loginFormElem = document.getElementById('login-form');
 if (loginFormElem) {
   const isRegistering = loginFormElem.dataset.isRegistering === 'true';
+  // [TODO][GW-1913] An AppContainer gets csrf data
   const csrf = loginFormElem.dataset.csrf;
   ReactDOM.render(
     <I18nextProvider i18n={i18n}>

src/server/views/login.html

@@ -105,6 +105,7 @@
         </div>
       </div>
 
+      <!-- [TODO][GW-1913] An AppContainer gets csrf data -->
       <div id="login-form"
         data-is-registering="{{ req.query.register or req.body.registerForm or isRegistering }}"
         data-csrf="{{ csrf() }}"