loginFailed is now based in a session instead of a _GET see BT#6486