add step definition to validation flash messages
make 'login with password' step definition non-greedy so that we can actually give it a password
add cuke to test that a (b)locked user cannot log in
fix #1405: fake invalid credentials when a blocked user tries to login
Merge pull request #267 from opf/feature/rails3_incorrect_error_mgs_for_blocked_users

Feature/rails3 incorrect error mgs for blocked users