See #161: Corrected for an issue where restlet seems to be populating the credentials cookie twice.  Make an error response.