/**
 * Login prompt.
 *
 * This component provides an HTTP handler that prompts for login.
 */
exports = module.exports = function(csrfProtection, ceremony) {
  
  
  function prompt(req, res, next) {
    res.locals.csrfToken = req.csrfToken();
    
    res.render('login', function(err, str) {
      if (err && err.view) {
        return res.redirect('/login/password');
      } else if (err) {
        return next(err);
      }
      res.send(str);
    });
  }
  
  
  return [
    csrfProtection(),
    ceremony(
      prompt
    ),
    // Should GET requests that error with a state destroy the state?  I think not
    // There needs to be an option for it (external?) that does, for eg OAuth
    //errorLogging()
  ];
};

exports['@require'] = [
  'http://i.bixbyjs.org/http/middleware/csrfProtection',
  'http://i.bixbyjs.org/http/middleware/ceremony'
];

@@ -140,24 +140,21 @@
 ection, 
-ceremony
+state
 ) %7B%0A  %0A 
@@ -500,20 +500,17 @@
     
-ceremony(%0A  
+state(),%0A
     
@@ -520,15 +520,8 @@
 mpt%0A
-    ),%0A
     
@@ -832,16 +832,13 @@
 are/
-ceremony
+state
 '%0A%5D;

Remove ceremony from login prompt, replace with state.