status URI: Respond 403 if user not allowed.
Remove extra logging.
Avoid mutable argument default.
Add special error page for certain login problems.
Add templated links for login.html.

Signup and password reset links need to be different for test
and pilot environments. Use runtime templating to achieve that.