Updated login.php

Not sure where these changes came from, seems to be mostly line wrapping
changes.
Fixed two potential SQL injections