More storage root

Login and traversal is verified to work with accounts that reside on both the primary and secondary servers, and the behavioral tests for login now return "login:" urls of the same form as examples from the server.