Make the path configurable:
The reason for such a configuration is that you might not like the /dmz/ or maybe Google's Safe Browsing database does not like the /dmz/ path on your website for reasons only known by Google.
The default stays /dmz/, so no need to change anything if you have no problems.
Pwd reset process
Support form on login page
Social / oAuth login (tested with Azure AD Login)
Social login with automatic redirect
Social login with registration
Remote login form