and now it validates
Merge pull request #547 from Pomax/bug945913

turned loginurl into a proper link element instead