hiddenwhich means that it will not show up in the browser and it is not a field that a user fills in. It is generated by the site itself, and for your curl login to succeed, you need extract that value and use that in your POST submission together with the rest of the data.
<form>tag anyway, you could do something like this first:
-bfor reading cookies from the file and
-cto store cookies again, for when the server sends back updated cookies.
-Lcommand line option. Adding that to the previous command line then makes the full one look like:
-con the command lines to use and update the cookies.
Referer:is actually identifying the legitimate parent URL when you request something or when you login or similar. You can then inform the server from which URL you arrived by using
-e https://example.com/etc. Appending that to the previous login attempt then makes it: