login: show error message instead of alert box; adapted login tests