Unlock this challenge:
When you're working with json_login, imagine you accidentally set the Content-Type header in your Ajax call to application/xml instead of application/json. What do you think would happen?
json_login
Content-Type
application/xml
application/json
No biggie, json_login rolls with it and decodes the data correctly thanks to the serializer.
A 200 status code is returned, but the json_login mechanism is completely skipped
Our app complains with a 415 Unsupported Media Type error
Our app freaks out and sends back a 500 Internal Server Error