If no userid is specified in the URL then the client omits the login card
from its request.