remove * from authentication errors, add test to ensure proper heading is displayed after successful login