check whether login actually succeeds, and fix misleading help text

Fixes #3, #4