<section class="auth-section">
  <div class="container auth-container">
    <div class="auth-card">
      <h1 class="auth-title">Connexion</h1>
      <p class="auth-sub">Accédez à votre espace VIP.</p>

      <%- include('partials/form-errors', { errors: errors }) %>

      <form action="/login" method="post" class="form" novalidate>
        <input type="hidden" name="_csrf" value="<%= csrfToken %>" />
        <div class="field">
          <label for="email">Adresse email</label>
          <input type="email" id="email" name="email" autocomplete="email" required
                 value="<%= values.email || '' %>" />
        </div>
        <div class="field">
          <label for="password">Mot de passe</label>
          <input type="password" id="password" name="password" autocomplete="current-password" required />
        </div>
        <div class="field-row">
          <a href="/forgot-password" class="link-small">Mot de passe oublié&nbsp;?</a>
        </div>
        <button type="submit" class="btn btn-primary btn-block">Se connecter</button>
      </form>

      <p class="auth-switch">Pas encore de compte&nbsp;? <a href="/register">Créer un compte</a></p>
    </div>
  </div>
</section>
