Reinstate 'invalid password' message
Handle PHP 5.1's restricted setcookie()