When logging in to Phabricator, with Multifactor Auth turned on (I use Google Authenticator), the page which prompts the MFA token will show number of alerts, number of conpherence alerts, search bar, etc. I feel like these should all be hidden until the user actually auths.