Facing a Forbidden issue

The problem seems to be the data in the AJAX request does not contain the csrf field.

Your code:

Code:

data: {'email':email,'password':password,'remember':remember},

To capture all the inputs from the <form> in the easiest way use this.

PHP Code:

data: $('#login').serializeArray(); 


Question: Is this the setting in your config.php?

PHP Code:

$config['csrf_token_name'] = 'csrf_test_name'; 


If not your hidden field is not correct either.