fix #89 shouldn't see 'finish' button on login when link is invalid or expired