Fixed bug in login controller

Login message for bad login was appearing when not logged in.  Added
logic to only show when specifically a bad login attempt was made.