changed login logic so 'empty username or password' doesn't display if the user hasn't tried to submit the form