Login page refactoring

Clean up login view methods and display warning if session.secure setting is True and HTTPS isn’t detected.  Refactor form HTML to force browsers to remember passwords.