Fix: Login loop with cookies disabled

When trying to login with cookies disabled no error message is shown to
the user. Some 'corporate' networks have this setup by default, I have
experienced it recently with Concrete & a client.

The patch below modifies the login controller to throw an exception on
cookies being disabled.

Not a major, I know, but still deserves a patch.