Fixed login flow and added forbidden page